black hat .cn networks

Tue May 1 01:09:25 UTC 2001

On Mon, 30 Apr 2001, k claffy wrote:
> On Mon, Apr 30, 2001 at 03:51:09PM -0700, Dan Hollis wrote:
>   On Mon, 30 Apr 2001, Segal, Mark wrote:
>   > if it is actually based from there...
>   The ones being picked up by the distributed intrusion sensor projects
>   indicate they are.
> what distributed intrusion sensor projects
> are those?

dshield and mynetwatch

chinanet shows up several times in the lists of 'top attack ip sources',
along with "no response" (to emails reporting to them the attacks)

-Dan