Security Incidents mailing list archives
Re: Korea (was RE: ?)
From: patrick () PINE NL (Patrick Oonk)
Date: Fri, 28 Jan 2000 22:15:51 +0100
On Fri, Jan 28, 2000 at 04:02:33PM -0500, Dug Song wrote:
and just a suggestion, but you may want to raise your alert threshold - and if a forgeable TCP SYN portscan is enough to raise your hackles on a public mailing list, you'll be tearing your hair out when a single script kid goes at you with nmap -D...
Actually I don't bother at all, but after checking out the offending hosts it was clear they were hijacked and used as an attack base. As such they are a menace to the net as a whole. I also found it said for they owners but they don't seem to care. Patrick -- Patrick Oonk - PO1-6BONE - patrick () pine nl - www.pine.nl/~patrick Pine Internet B.V. PINE31337-RIPE PGP key ID BE7497F1 Tel: +31-70-3111010 - Fax: +31-70-3111011 - http://www.pine.nl/ ---- Pine Security Digest - http://security.nl/ (Dutch) ---- Excuse of the day: Your excuse is: firewall needs cooling
Current thread:
- Re: Korea (again), (continued)
- Re: Korea (again) zeek (Jan 27)
- Re: Korea (again) Kim Roland Rasmussen (Jan 27)
- Re: Korea (again) Thomas Molina (Jan 27)
- Re: Korea (again) Rob Quinn (Jan 28)
- Re: Korea (again) Granquist, Lamont (Jan 27)
- Re: Korea (was RE: ?) horio shoichi (Jan 26)
- Re: Korea (was RE: ?) David Brumley (Jan 27)
- Re: Korea (was RE: ?) Patrick Oonk (Jan 28)
- Re: Korea (was RE: ?) Arrigo Triulzi (Jan 28)
- Re: Korea (was RE: ?) Dug Song (Jan 28)
- Re: Korea (was RE: ?) Patrick Oonk (Jan 28)
- DNS update queries: another sort of suspicious activity. Fyodor (Jan 28)
- Re: DNS update queries: another sort of suspicious activity. Patrick Oonk (Jan 28)
- Re: DNS update queries: another sort of suspicious activity. Fyodor (Jan 28)
- Re: DNS update queries: another sort of suspicious activity. Patrick Oonk (Jan 28)
- Recent Scans Edwin Covert (Jan 28)
- Re: DNS update queries: another sort of suspicious activity. Rob Quinn (Jan 31)
- Re: Socks port 1080 Randy Mclean (Jan 21)
- Re: Socks port 1080 Richard Bejtlich (Jan 21)
- Unusual Netstat Listing Rob (Jan 22)