gentlemen, stop your engines

Paul Vixie paul at vix.com
Mon Aug 12 16:05:05 UTC 2002


after six reports that 192.5.5.241's address has been forged as the source
of a tcp "fragmented scan" probe, i'm ready to have it stop.  but just in
case it doesn't, this is fair warning to the community: F's address is in
unlawful use by as-yet-unidentified third parties.

re:

------- Forwarded Message

From: ...
To: "'abuse at VIX.COM'" <abuse at VIX.COM>
Subject: Unauthorized Fragmented Scan
Date: Mon, 12 Aug 2002 06:56:08 -0700

		To whom it may concern,

		The Security Information & Analysis Center has detected an
unauthorized scan against one of our networks that has a possible origin at
192.5.5.241.

		Please review the following initial information:

		IPHalfScan  08-11-2002	 17:34:02 UTC 	192.5.5.241:53
xxx.xxx.xxx.xxx:53	TCP
		IPHalfScan  08-11-2002	 17:28:00 UTC 	192.5.5.241:53
xxx.xxx.xxx.xxx:53	TCP

		Please take action to verify this address on your network
and it's intent to scan our networks.  Thank you for your assistance.

		SECURITY INFORMATION AND ANALYSIS CENTER
		1-877-...

------- End of Forwarded Message




More information about the NANOG mailing list