[47991] in North American Network Operators' Group
Re: "portscans" (was Re: Arbor Networks DoS defense product)
daemon@ATHENA.MIT.EDU (Scott Francis)
Mon May 20 02:02:33 2002
Date: Sun, 19 May 2002 22:59:39 -0700
From: Scott Francis <darkuncle@darkuncle.net>
To: Ralph Doncaster <ralph@istop.com>
Cc: nanog@merit.edu
Message-ID: <20020520055939.GD74389@darkuncle.net>
Mail-Followup-To: Scott Francis <darkuncle@darkuncle.net>,
Ralph Doncaster <ralph@istop.com>, nanog@merit.edu
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-ripemd160;
protocol="application/pgp-signature"; boundary="7DO5AaGCk89r4vaK"
Content-Disposition: inline
In-Reply-To: <Pine.LNX.4.21.0205191000220.16913-100000@cpu1693.adsl.bellglobal.com>
Errors-To: owner-nanog-outgoing@merit.edu
--7DO5AaGCk89r4vaK
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sun, May 19, 2002 at 10:03:08AM -0400, ralph@istop.com said:
>=20
> > > rough assessment of their network security, which was important to me
> > > as a customer for obvious reasons.
> >=20
> > In that case, I would not consider the scan to have come from an
> > 'unaffiliated' person. I'm sure if the bank's network operator noticed =
it,
> > and contacted you, things would have been cleared up with no harm done.=
To
>=20
> It sounds like you know something that I don't. How do you find out the
> contact information for someone given only an IP address?
You know the contact information for the block that the scan originated fro=
m.
=46rom there, it's detective work (if the admin of the block in question
cooperates, hopefully not too much).
--=20
Scott Francis darkuncle@ [home:] d a r k u n c l e . n e t
Systems/Network Manager sfrancis@ [work:] t o n o s . c o m
GPG public key 0xCB33CCA7 illum oportet crescere me autem minui
--7DO5AaGCk89r4vaK
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org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=V0Dm
-----END PGP SIGNATURE-----
--7DO5AaGCk89r4vaK--
