North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

gentlemen, stop your engines

  • From: Paul Vixie
  • Date: Mon Aug 12 12:07:20 2002

after six reports that 192.5.5.241's address has been forged as the source
of a tcp "fragmented scan" probe, i'm ready to have it stop.  but just in
case it doesn't, this is fair warning to the community: F's address is in
unlawful use by as-yet-unidentified third parties.

re:

------- Forwarded Message

From: ...
To: "'[email protected]'" <[email protected]>
Subject: Unauthorized Fragmented Scan
Date: Mon, 12 Aug 2002 06:56:08 -0700

		To whom it may concern,

		The Security Information & Analysis Center has detected an
unauthorized scan against one of our networks that has a possible origin at
192.5.5.241.

		Please review the following initial information:

		IPHalfScan  08-11-2002	 17:34:02 UTC 	192.5.5.241:53
xxx.xxx.xxx.xxx:53	TCP
		IPHalfScan  08-11-2002	 17:28:00 UTC 	192.5.5.241:53
xxx.xxx.xxx.xxx:53	TCP

		Please take action to verify this address on your network
and it's intent to scan our networks.  Thank you for your assistance.

		SECURITY INFORMATION AND ANALYSIS CENTER
		1-877-...

------- End of Forwarded Message