[56255] in North American Network Operators' Group
Re: anti-spam vs network abuse
daemon@ATHENA.MIT.EDU (Rob Thomas)
Fri Feb 28 22:21:51 2003
Date: Fri, 28 Feb 2003 21:20:41 -0600 (CST)
From: Rob Thomas <robt@cymru.com>
To: NANOG <nanog@merit.edu>
In-Reply-To: <E18ouQT-0000eM-00@roam.psg.com>
Errors-To: owner-nanog-outgoing@merit.edu
Hi, NANOGers.
] and conversely, all attacks are not preceded by scanning.
Very true. Most of the attack activity I monitor does not include
scanning activity or any other reconnaissance. However, those who
attack often enjoy monitoring their progress. This can be an
interesting (albeit difficult) way to trace back the attack to the
sources.
Thanks,
Rob.
--
Rob Thomas
http://www.cymru.com
ASSERT(coffee != empty);
