Security Incidents mailing list archives

Re: netpay.tv connections


From: Jeremiah Cornelius <jeremiah () nur net>
Date: Mon, 5 Jan 2004 08:16:49 -0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Saturday 03 January 2004 16:31, Dave wrote:
 For at least the past 36 hours I've been getting connectons from netpay.
I'm not sure if they are spoofed or not. The site doesnt appear to be
online. Anyone else seeing this?


We have several clients with the same traffic being logged.  Netpay has been 
contacted, and they respond that the system with that source address has been 
offline for more than 48 hours.  It is pretty much confirmed that this 
traffic is being spoofed.

- -- 
Jeremiah Cornelius, Level 3
farm9 Information Security
email: jc () farm9 com

"What would be the use of immortality to 
a person who cannot use well a half hour?"
 --Ralph Waldo Emerson
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQE/+Y38Ji2cv3XsiSARAvPVAJ9PuT9fD31oQMmt5AMv2Kwgmm3jtgCg5ySw
36SGPX/D5BZcDrMY/IcvHJY=
=cVr1
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: