gentlemen, stop your engines
Paul Vixie
paul at vix.com
Mon Aug 12 16:05:05 UTC 2002
after six reports that 192.5.5.241's address has been forged as the source
of a tcp "fragmented scan" probe, i'm ready to have it stop. but just in
case it doesn't, this is fair warning to the community: F's address is in
unlawful use by as-yet-unidentified third parties.
re:
------- Forwarded Message
From: ...
To: "'abuse at VIX.COM'" <abuse at VIX.COM>
Subject: Unauthorized Fragmented Scan
Date: Mon, 12 Aug 2002 06:56:08 -0700
To whom it may concern,
The Security Information & Analysis Center has detected an
unauthorized scan against one of our networks that has a possible origin at
192.5.5.241.
Please review the following initial information:
IPHalfScan 08-11-2002 17:34:02 UTC 192.5.5.241:53
xxx.xxx.xxx.xxx:53 TCP
IPHalfScan 08-11-2002 17:28:00 UTC 192.5.5.241:53
xxx.xxx.xxx.xxx:53 TCP
Please take action to verify this address on your network
and it's intent to scan our networks. Thank you for your assistance.
SECURITY INFORMATION AND ANALYSIS CENTER
1-877-...
------- End of Forwarded Message
More information about the NANOG
mailing list