Snort mailing list archives

Re: Todays Terrorist Attack


From: "Ben N. Venzke" <bvenzke () tempestco com>
Date: Wed, 12 Sep 2001 12:31:21 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A number of "hackers" have begun calling for and attacking both Arab 
nation state networks and terrorist related sites. If they begin to 
meet with some success we can expect a significant response along the 
lines of the attacks by pro-Palestinian actors during the 
Israeli-Palestinian Cyber Conflict almost a year ago.

                        - Ben Venzke


Good Info,

Keep posting more like this. We need to contain any possibility of escalation.
Thanks again

At 11:38 AM 9/12/2001 -0400, Gordon Ewasiuk wrote:

On Yesterday, SecurityGauntlet wrote:

Please place postings on any trends that make you suspicious of  ANY future
Terrorist Attacks to come.

Activity is increasing at this datacenter...

over 3 million individual attacks since 1700hrs EST yesterday (11Sept01).

Profiles include:  Code Red, SMTP probes & overflow attempts
(passing large values during HELO, MAIL FROM, etc.), rpc stuff, as
well as ping sweeps and port scans.

Most of the bad guys are coming from APNIC IP blocks at this time.
Secondary suspects are from RIPE blocks in France as well as cable
modem/DSL block domestically.


- -- 

______________________
IntelCenter
Voice (703) 370-2962
Fax (703) 370-1571
Email - information () intelcenter com
Web - http://www.intelcenter.com
PGP Public Key - available upon request

PO Box 22572
Alexandria, VA 22304-9257
USA

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2

iQA/AwUBO5+N6v76H8QHdGcYEQLIvACcD6jjWC1a/ms9dBknmvbeuOMxfpwAn0CQ
g65SQgG+zWYXCYTgbIorjLwQ
=eNVw
-----END PGP SIGNATURE-----

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: