Fwd: [ISN] Hackers exploit Korea to attack global systems

Sat Apr 27 03:20:02 UTC 2002

On 26 Apr 2002, John R. Levine wrote:

> >>Some foreign servers block access attempts whose origins are traced to
> >>Korea, implying that the country's leadership in the broadband
> >>Internet business may be marred by its negligence in upgrading lame
> >>security protection systems, the center said.
>
> No kidding.  Some of us have gotten so tired of spam from Korea, both
> stuff relayed from the west and Korean-language spam promoting Korean
> web sites, combined with the complete lack of response to all abuse
> reports, that we've blocked all mail from Korean networks.

It extends beyond spam. We run a fairly high-volume website for a client
that has a members area. We have seen nothing but continuous DOS and password
scanning attempts against the site(on the order of several thousand per
second) from numerous points across Korean IP space to the point that
we've begun blackholing all of it as soon as these attacks begin(several a
day.)

Scary stuff.

/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
                               Patrick Greenwell
         Asking the wrong questions is the leading cause of wrong answers
\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/