nanog mailing list archives

Re: Scanning (was Re: Stealth Blocking)


From: "Christopher A. Woodfield" <rekoil () semihuman com>
Date: Sat, 26 May 2001 10:35:47 -0400


About two years ago the <vijay> promising local ISP </vijay> I worked 
for saw the number or ORBS-listed hosts withing its netspace go from ~400 
to over 3,000 in one week. Among the listings was a class C where EVERY HOST, 
254 IPs, in the block was listed. Granted, each one was an open relay, but the 
point is that each IP was individually relay tested. When questioned about 
this, Alan Brown reponded that he had "received an unusually large number 
of nominations" for hosts in our netspace. Uh huh. Sure.

-C

On Thu, May 24, 2001 at 02:04:02PM -0400, Greg A. Woods wrote:

[ On Thursday, May 24, 2001 at 08:52:07 (-0400), William Allen Simpson wrote: ]
Subject: Scanning (was Re: Stealth Blocking)


(The problem with ORBS was not the scanning, but rather the aggressive 
nature of the scanner,

ORBS does not scan.  Period.

If you believe it does then prove it with complete logs that can be
verified by looking through the ORBS database.

-- 
                                                      Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods () acm org>     <woods () robohack ca>
Planix, Inc. <woods () planix com>;   Secrets of the Weird <woods () weird com>


-- 
---------------------------
Christopher A. Woodfield                rekoil () semihuman com

PGP Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB887618B


Current thread: