Re: Interesting reply

[Mikael Gripenstedt <idol () CHELLO SE>]

On Thu, 12 Oct 2000, Gary Flynn wrote:

> "Forrester, Mike" wrote:
> > From my experience (I work for a broadband ISP), most of our problems with
> > people scanning is from a compromised system.  No, I don't have exact
> > numbers, but MOST is about right. ;)
>
> Mike,
>
> How do you determine if the box used for scanning is compromised? Do you take
> the owner's word? How about other ISPs listening here?
>
> --
> Gary Flynn
> Security Engineer - Technical Services
> James Madison University
>
> Please RUNSAFE
> http://www.jmu.edu/computing/info-security/engineering/protecting_yourself.htm

I would say that most scans come from bored ppl looking for a easy
target and whois rather clueless about what they are doing. At least
most of the customers we contacted after a reported incident seem that
way...

regards,

--] Mikael Gripenstedt

   UNIX SysAdmin | chello broadband, Sweden