Security Incidents mailing list archives
RE: Scans from proxyprotector.com
From: "Rob Shein" <shoten () starpower net>
Date: Tue, 27 May 2003 12:21:03 -0400
What do you do when someone decides to spoof a ton of scanning activity from someone they dislike, to get them on the list? If you only react to full connect scanning, you won't catch many bad guys, but if you don't require handshaking, you become a great tool for the abuse of others. -----Original Message----- From: Mark Ng [mailto:laptopalias1-mark () informationintelligence net] Sent: Tuesday, May 27, 2003 6:10 AM To: Justin Pryzby; Kurt Seifried Cc: incidents () securityfocus com Subject: RE: Scans from proxyprotector.com
Or a site that lists hosts that should be blocked? Like the dynamic email blocking: just cron a daily download and firewall rule update. Anyone up for this?
I'd be up for lending a helping hand in a project such as this - it might take some brave soul to host it though. I would say you'd *definitely* need a lawyer on hand though to write a fairly waterproof usage policy. Any lawyers on list who would help out ?
Justin PryzbyGreat. So that only took 2 weeks. Stellar. Does anyone know ofa site that
Like the guy later on said - I suppose we should at least be thankful that they did anything at all. Although it appears sending mail to abuse@ didn't , and probably wouldn't have helped at all. Regards, Mark Ng (www.informationintelligence.net) ---------------------------------------------------------------------------- ---------------------------------------------------------------------------- ---------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- RE: Scans from proxyprotector.com, (continued)
- RE: Scans from proxyprotector.com Matthew F. Caldwell (May 20)
- RE: Scans from proxyprotector.com Compton, Rich (May 20)
- Re: Scans from proxyprotector.com Kurt Seifried (May 21)
- Re: Scans from proxyprotector.com Erik Fichtner (May 22)
- Are they back? (was Re: Scans from proxyprotector.com) Erik V. Olson (May 26)
- RE: Are they back? (was Re: Scans from proxyprotector.com) Mark Ng (May 27)
- RE: Are they back? (was Re: Scans from proxyprotector.com) jlewis (May 28)
- Re: Scans from proxyprotector.com Kurt Seifried (May 21)
- Re: Scans from proxyprotector.com Justin Pryzby (May 22)
- Re: Scans from proxyprotector.com Valdis . Kletnieks (May 22)
- RE: Scans from proxyprotector.com Mark Ng (May 27)
- RE: Scans from proxyprotector.com Rob Shein (May 27)
- Re: Scans from proxyprotector.com Kurt Seifried (May 27)