On Thu, 12 Oct 2000, Gary Flynn wrote:
> "Forrester, Mike" wrote:
> >
> > From my experience (I work for a broadband ISP), most of our problems with
> > people scanning is from a compromised system. No, I don't have exact
> > numbers, but MOST is about right. ;)
>
> Mike,
>
> How do you determine if the box used for scanning is compromised? Do you take
> the owner's word? How about other ISPs listening here?
>
> --
> Gary Flynn
> Security Engineer - Technical Services
> James Madison University
>
> Please RUNSAFE
> http://www.jmu.edu/computing/info-security/engineering/protecting_yourself.htm
>
I would say that most scans come from bored ppl looking for a easy
target and whois rather clueless about what they are doing. At least
most of the customers we contacted after a reported incident seem that
way...
regards,
--] Mikael Gripenstedt
UNIX SysAdmin | chello broadband, Sweden
Received on Oct 13 2000