Security Incidents mailing list archives
Re: Korea a classic ? was: IP blacklist
From: do.geun.jo () KR ARTHURANDERSEN COM (Doglus Cho)
Date: Tue, 16 May 2000 11:07:19 +0900
Mr. Hektor, There is a WHOIS server in KRNIC, which surely provide a contact list with "RFC 2142" compliant addresses. If you do not want to go over such painful approach, just report your incidents to cert () certcc or kr with your solid evidence and wait for reply. If you are sure that it came from one of the KAIST host, contact paladin () sparcs kaist ac kr. It is sad to see this kind of messages on one side and the "ph33r the b33r" stuff on the other side. To: INCIDENTS () securityfocus com cc: (bcc: Do Geun Jo) Date: 2000-05-15 10:32 PM From: hektor () rz rwth-aachen de Subject: Korea a classic ? was: IP blacklist Hi, having read the sentence above in this list last week I started to smile, until there was a portscan from korea the same day. So if Korea is a classic, it is at least a classic tragedy:-( For the source there were no WHOIS entries at APNIC http://www.apnic.net/apnic-bin/whois.pl (is APNIC located in Korea ? seems to be tragic, too). So I found out, that it came from KAIST (some "hightech" university over there). And no chance to reach someone concerning in security there. No RFC 2142 compliant adresses like "abuse@" or "security@". And how about this ? Hacker News Network http://www.hackernews.com/ reports that there will be a hacking contest held by KAIST, more info under: http://www.koreaherald.co.kr/news/2000/05/__10/20000515_1023.htm I think I start loving the idea blocking these korean networks. Or did they already start their "contest" ? Sorry for my sarcasm, Jens Hektor *******************Internet Email Confidentiality Footer******************* Privileged/Confidential Information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such case, you should destroy this message, and notify us immediately. If you or your employer does not consent to Internet email messages of this kind, please advise us immediately. Opinions, conclusions and other information expressed in this message are not given or endorsed by my firm or employer unless otherwise indicated by an authorized representative independent of this message.
Current thread:
- Re: Korea a classic ? was: IP blacklist Doglus Cho (May 15)
- Re: Korea a classic ? was: IP blacklist Jens Hektor (May 16)
- Re: Korea a classic ? was: IP blacklist Russell Fulton (May 16)
- Re: Korea a classic ? was: IP blacklist Jane DelFavero (May 18)
- Re: Korea a classic ? was: IP blacklist Russell Fulton (May 16)
- Strange logs and scans. Lic. Rodolfo Gonzalez Gonzalez (May 17)
- Re: Strange logs and scans. * * (May 19)
- While we're on viruses... Keith McCammon (May 19)
- <Possible follow-ups>
- Re: Korea a classic ? was: IP blacklist Doglus Cho (May 16)
- Re: Korea a classic ? was: IP blacklist Cho, Douglas (May 17)
- Re: Korea a classic ? was: IP blacklist Jens Hektor (May 16)