Security Incidents mailing list archives
Re: Korea (was RE: ?)
From: dugsong () MONKEY ORG (Dug Song)
Date: Fri, 28 Jan 2000 16:02:33 -0500
On Fri, 28 Jan 2000, Patrick Oonk wrote:
Another Korean scan. Did anyone EVER get ANY reply to an abuse report from Korea ? Either Koreans cannot read English or they just don't care.
almost all Koreans read English. but the person you're communicating with may not understand what you're talking about - many Korean companies are relative newcomers to the Internet, and few have anything resembling an information security program or a corporate information security officer. your best bet is probably to contact the Korean Computer Emergency Response Team (CERT-KR): Emergency Call: +82-2-3488-4119 FAX : +82-2-3488-4129 E-Mail : cert () certcc or kr Cellular Phone : +82-18-312-4119 Pagers : +82-15-933-4571 ~ 4573 http://www.certcc.or.kr/certcc/ecertcc.html and just a suggestion, but you may want to raise your alert threshold - and if a forgeable TCP SYN portscan is enough to raise your hackles on a public mailing list, you'll be tearing your hair out when a single script kid goes at you with nmap -D... -d. --- http://www.monkey.org/~dugsong/
Current thread:
- Re: Korea (again), (continued)
- Re: Korea (again) Kim R. Rasmussen (Jan 26)
- Re: Korea (again) zeek (Jan 27)
- Re: Korea (again) Kim Roland Rasmussen (Jan 27)
- Re: Korea (again) Thomas Molina (Jan 27)
- Re: Korea (again) Rob Quinn (Jan 28)
- Re: Korea (again) Granquist, Lamont (Jan 27)
- Re: Korea (was RE: ?) horio shoichi (Jan 26)
- Re: Korea (was RE: ?) David Brumley (Jan 27)
- Re: Korea (was RE: ?) Patrick Oonk (Jan 28)
- Re: Korea (was RE: ?) Arrigo Triulzi (Jan 28)
- Re: Korea (was RE: ?) Dug Song (Jan 28)
- Re: Korea (was RE: ?) Patrick Oonk (Jan 28)
- DNS update queries: another sort of suspicious activity. Fyodor (Jan 28)
- Re: DNS update queries: another sort of suspicious activity. Patrick Oonk (Jan 28)
- Re: DNS update queries: another sort of suspicious activity. Fyodor (Jan 28)
- Re: DNS update queries: another sort of suspicious activity. Patrick Oonk (Jan 28)
- Recent Scans Edwin Covert (Jan 28)
- Re: DNS update queries: another sort of suspicious activity. Rob Quinn (Jan 31)
- Re: Socks port 1080 Randy Mclean (Jan 21)
- Re: Socks port 1080 Richard Bejtlich (Jan 21)
- Unusual Netstat Listing Rob (Jan 22)