Security Incidents mailing list archives

Re: Korea (was RE: ?)


From: dugsong () MONKEY ORG (Dug Song)
Date: Fri, 28 Jan 2000 16:02:33 -0500


On Fri, 28 Jan 2000, Patrick Oonk wrote:

Another Korean scan. Did anyone EVER get ANY reply to an abuse report
from Korea ? Either Koreans cannot read English or they just don't care.

almost all Koreans read English. but the person you're communicating with
may not understand what you're talking about - many Korean companies are
relative newcomers to the Internet, and few have anything resembling an
information security program or a corporate information security officer.

your best bet is probably to contact the Korean Computer Emergency
Response Team (CERT-KR):

        Emergency Call: +82-2-3488-4119
        FAX : +82-2-3488-4129
        E-Mail : cert () certcc or kr
        Cellular Phone : +82-18-312-4119
        Pagers : +82-15-933-4571 ~ 4573

        http://www.certcc.or.kr/certcc/ecertcc.html

and just a suggestion, but you may want to raise your alert threshold -
and if a forgeable TCP SYN portscan is enough to raise your hackles on a
public mailing list, you'll be tearing your hair out when a single script
kid goes at you with nmap -D...

-d.

---
http://www.monkey.org/~dugsong/



Current thread: