[50860] in North American Network Operators' Group
gentlemen, stop your engines
daemon@ATHENA.MIT.EDU (Paul Vixie)
Mon Aug 12 12:05:35 2002
From: Paul Vixie <paul@vix.com>
To: nanog@merit.edu
Date: Mon, 12 Aug 2002 16:05:05 +0000
Errors-To: owner-nanog-outgoing@merit.edu
after six reports that 192.5.5.241's address has been forged as the source
of a tcp "fragmented scan" probe, i'm ready to have it stop. but just in
case it doesn't, this is fair warning to the community: F's address is in
unlawful use by as-yet-unidentified third parties.
re:
------- Forwarded Message
From: ...
To: "'abuse@VIX.COM'" <abuse@VIX.COM>
Subject: Unauthorized Fragmented Scan
Date: Mon, 12 Aug 2002 06:56:08 -0700
To whom it may concern,
The Security Information & Analysis Center has detected an
unauthorized scan against one of our networks that has a possible origin at
192.5.5.241.
Please review the following initial information:
IPHalfScan 08-11-2002 17:34:02 UTC 192.5.5.241:53
xxx.xxx.xxx.xxx:53 TCP
IPHalfScan 08-11-2002 17:28:00 UTC 192.5.5.241:53
xxx.xxx.xxx.xxx:53 TCP
Please take action to verify this address on your network
and it's intent to scan our networks. Thank you for your assistance.
SECURITY INFORMATION AND ANALYSIS CENTER
1-877-...
------- End of Forwarded Message
