Cogent has done well to remediate the compromised MikroTik routers on their network. 3,000 IPv4 hosts were found on Aug. 25 ( https://twitter.com/bad_packets/status/1033256704941514752) and today, only a hundred: https://censys.io/ipv4?q=%28%28%28%22CoinHive.Anonymous%22%29+AND+%28MikroTik%29%29+AND+location.country_code%3A+US%29+AND+autonomous_system.description.raw%3A+%22COGENT-174+-+Cogent+Communications%22&;
__ *Troy Mursch* On Thu, Oct 18, 2018 at 12:05 PM Aaron Gould <aar...@gvtc.com> wrote: > I guess those bots have to sit somewhere. I don’t know that they would be > in routers as much as they would be in Microsoft Windows… so if that’s what > you meant, then I see what you mean Michael > > > > Niels, I like my cogent and telia internet connections… I just recall > seeing more ddos on cogent then I did on my previous att, and current > spectrum… telia is showing a good bit of ddos also > > > > Let’s put it this way, I can thank Cogent and Telia for helping my get > better in my ddos mitigation skills J … there’s a bright side to > everything huh > > > > Aaron > > > > > > > > *From:* NANOG [mailto:nanog-boun...@nanog.org] *On Behalf Of *Michael > Crapse > *Sent:* Tuesday, October 16, 2018 8:37 PM > *To:* NANOG list > *Subject:* Re: Whats going on at Cogent > > > > Or he's saying that cogent has the biggest network of compromised users. > Usually ipv4 only eyeball networks tend to have the most bots on net. > > > > > > On Tue, 16 Oct 2018 at 19:22, Niels Bakker <niels=na...@bakker.net> wrote: > > * aar...@gvtc.com (Aaron1) [Wed 17 Oct 2018, 00:17 CEST]: > >However Cogent seems to be the dirtiest in regards to DDOS... > >however Telia might be catching up... in times past when I receive > >volumetric DDOS, Cogent typically ranks with the highest on my > >providers ... AT&T and spectrum seem to be a bit cleaner > > So you're saying, Cogent and Telia have the best backbones and > interconnects and thus deliver the most of your traffic to you, > even at times of peak utilization? > > > -- Niels. > >
