gentlemen, stop your engines

[Paul Vixie <paul () vix com>]

after six reports that 192.5.5.241's address has been forged as the source
of a tcp "fragmented scan" probe, i'm ready to have it stop.  but just in
case it doesn't, this is fair warning to the community: F's address is in
unlawful use by as-yet-unidentified third parties.

re:

------- Forwarded Message

From: ...
To: "'abuse () VIX COM'" <abuse () VIX COM>
Subject: Unauthorized Fragmented Scan
Date: Mon, 12 Aug 2002 06:56:08 -0700

                To whom it may concern,

                The Security Information & Analysis Center has detected an
unauthorized scan against one of our networks that has a possible origin at
192.5.5.241.

                Please review the following initial information:

                IPHalfScan  08-11-2002   17:34:02 UTC   192.5.5.241:53
xxx.xxx.xxx.xxx:53      TCP
                IPHalfScan  08-11-2002   17:28:00 UTC   192.5.5.241:53
xxx.xxx.xxx.xxx:53      TCP

                Please take action to verify this address on your network
and it's intent to scan our networks.  Thank you for your assistance.

                SECURITY INFORMATION AND ANALYSIS CENTER
                1-877-...

------- End of Forwarded Message