Exodus: this is bad

Tue Nov 17 21:34:04 UTC 1998

-----BEGIN PGP SIGNED MESSAGE-----

The CERT Coordination Center is aware of the widespread scanning
activity which has been discussed in the past 24 hours on the
NANOG mailing list. 

The CERT/CC has published two incidents note containing details 
about scanning techniques which may be of interest. 

* IN-98.04, "Advanced Scanning"

  http://www.cert.org/incident_notes/IN-98.04.html

* IN-98.02, "New Tools Used for Widespread Scans"

  http://www.cert.org/incident_notes/IN-98.02.html

Based on the reports we have received directly, the activity
appears to fall within the scope of these two documents. If there
is activity which appears to be different than what's covered in
these documents, we'd certainly like to receive detailed reports
from sites involved.

In general, we encourage sites to report scanning activity to the 
CERT/CC to aid us in understanding the nature and scope of security 
incidents on the Internet. Our incident reporting guidelines can be 
found at:

  http://www.cert.org/tech_tips/incident_reporting.html

Regards,

Kevin

- --
Kevin J. Houle
Technical Coordinator
_________________________________________________________
CERT* Coordination Center      | cert at cert.org
Software Engineering Institute | Hotline: +1-412-268-7090
Carnegie Mellon University     | Fax: +1-412-268-6989
- ---------------------------------------------------------

-----BEGIN PGP SIGNATURE-----
Version: PGP for Business Security 5.5

iQCVAwUBNlHrn3VP+x0t4w7BAQEvfAP/TbrJozmQZ/4UUrn/pCO7QiSrTzla74YK
NLy1o1hkbmsPOSU91x0ShqG0CKGjlaZu+DQrEnJHJY7q1zgUa+UVF/CPNvRGJhyc
MpbOa1ZgSy1wVhS5FCKbc0kBDcgQVDgjvfkizSgX38RlCviGN5jaaQgsutimRfFT
8LVFgFS2Rig=
=rUg5
-----END PGP SIGNATURE-----