OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Vadim Pushkin (wiskbroom_at_hotmail.com)
Date: Thu Jan 30 2003 - 23:20:57 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    I read in Snort archives a posting by Michael C. Ibarra
    from back in Nov and Dec 2002 stating that he sees
    much scans to his sensors on this port. See archives. I
    ask him and he says that scans came from Korea.
    Seem to me that this was deliberate, maybe from
    there? According to his data.

       Vadim Anatoly Pushkin
    -- The Ukranian Stallion --

    >From: ÀÌ ÁØ <mistra_knighthotmail.com>
    >To: snort-userslists.sourceforge.net
    >Subject: [Snort-users] 1434 UDP SLAMMER
    >Date: Wed, 29 Jan 2003 08:51:35 +0000
    >

    _________________________________________________________________
    MSN 8 with e-mail virus protection service: 2 months FREE*
    http://join.msn.com/?page=features/virus

    attached mail follows:


    Hi

    In Korea, Slammer occured on Saturday,  25, Jan 14:00 (GMT: Sat, 25, Jan, 5:00 :maybe Korea attacked first) And ISP's DNS Servers went down

    In few hours,  Korea's all ISP's  down :-(

    I think that ISP's sets SQL server and DNS server in same Network..

    Or Hacker Get ISP's access authority

    um.. how about your opnion?

    And Any Other ISP's down?

    /Lee June

     

     

     

     

     


    µµÃ³¿¡ µµ»ç¸®´Â ÀçÇØÀÇ À§Çèµé. AIGÀÇ ¹«·áº¸Çè À¸·Î ÇØ°áÇϼ¼¿ä. ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Snort-users mailing list Snort-userslists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users

    -------------------------------------------------------
    This SF.NET email is sponsored by:
    SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
    http://www.vasoftware.com
    _______________________________________________
    Snort-users mailing list
    Snort-userslists.sourceforge.net
    Go to this URL to change user options or unsubscribe:
    https://lists.sourceforge.net/lists/listinfo/snort-users
    Snort-users list archive:
    http://www.geocrawler.com/redir-sf.php3?list=snort-users