Security Incidents mailing list archives

Re: What the hell is with Korea?!


From: "Robert G. Ferrell" <root () rgfsparc cr usgs gov>
Date: Thu, 21 Sep 2000 12:20:30 -0500

      Can someone tell me what this was/is?  I traced the owner - duh -
some Korean IP, and sending them email to this regard just generates an
auto-replay that it's improperly formatted....now I have to go through the
hassle of trying to communicate with these hostmaster(s) over there.

      If anyone can shed light on this, please do.

There are many compromised hosts in South Korea.  Your best bet would be to
report the incident to the Korean CERT at

cert () certcc or kr

They've been a bit overwhelmed of late, but they do seem to be making an honest
effort to respond to incidents reported to them.

Cheers,

RGF

Robert G. Ferrell, CISSP
Information Systems Security Officer
National Business Center
U. S. Dept. of the Interior
Robert_G_Ferrell () nbc gov
========================================
 Who goeth without humor goeth unarmed.
========================================


Current thread: