North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Scanning (was Re: Stealth Blocking)

  • From: Christopher A. Woodfield
  • Date: Sat May 26 10:39:05 2001

About two years ago the <vijay> promising local ISP </vijay> I worked 
for saw the number or ORBS-listed hosts withing its netspace go from ~400 
to over 3,000 in one week. Among the listings was a class C where EVERY HOST, 
254 IPs, in the block was listed. Granted, each one was an open relay, but the 
point is that each IP was individually relay tested. When questioned about 
this, Alan Brown reponded that he had "received an unusually large number 
of nominations" for hosts in our netspace. Uh huh. Sure.

-C

On Thu, May 24, 2001 at 02:04:02PM -0400, Greg A. Woods wrote:
> 
> [ On Thursday, May 24, 2001 at 08:52:07 (-0400), William Allen Simpson wrote: ]
> > Subject: Scanning (was Re: Stealth Blocking)
> >
> > 
> > (The problem with ORBS was not the scanning, but rather the aggressive 
> > nature of the scanner,
> 
> ORBS does not scan.  Period.
> 
> If you believe it does then prove it with complete logs that can be
> verified by looking through the ORBS database.
> 
> -- 
> 							Greg A. Woods
> 
> +1 416 218-0098      VE3TCP      <[email protected]>     <[email protected]>
> Planix, Inc. <[email protected]>;   Secrets of the Weird <[email protected]>
> 

-- 
---------------------------
Christopher A. Woodfield		[email protected]

PGP Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB887618B