North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: script kiddie probes

  • From: Daniel Senie
  • Date: Mon Nov 27 17:32:27 2000

>From: Matt Levine <[email protected]>
>To: <[email protected]>
>Sent: Monday, November 27, 2000 5:11 PM
>Subject: RE: script kiddie probes
>
> Am I the only one thinking that they should filter out certain boxes (ie:
> the box named security-scan.home.net)?  .. I don't think it's going to be
> incredibly malicious unless you're a cable-modem customer..

And while they're at it, also remove RFC 1918 addreses, self-assign
addresses (169.254). I was underwhelmed when looking at their top 10 and
seeing such addresses listed.