Re: Simultaneous Attacks

[ryan () SECURITYFOCUS COM (Ryan Russell)]

On Fri, 7 Jul 2000, Harlan S. Barney, Jr. wrote:

> Today I have detected three simultaneous intrusions into my computer.
> I report ALL intrusions and expect maximum penalties.

Well, that's the problem we keep going around and around about.  What you
saw was a probe.  Probes aren't illegal.  Unless the guy's ISP has a
policy against probing (many do) then the maximum penalty is nothing.  In
fact, so many of the ISPs are getting complaints like this, that according
to previous threads here, they will just ignore the report, or log it and
do something if they get lots more reports about the same user.

I suspect Elias let this through so that people could have the log info
you provided, to correclate themselves.  As for the penalty part, I hope
you're not too disappointed if you don't get satifactory results.  At
best, someone here will check their logs, find the same thing, and that
will prompt them to file a report too.  Enough reports about the same
user, and the guy may get cut off.  That can be painful if he gets on the
blacklist for his high-speed provider, and there is no other game in town.

                                        Ryan