[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Block 198.175 admins? who are they?

On Tue, Sep 24, 2002 at 10:32:03AM -0400, Noah L. Meyerhans wrote:
> On Tue, Sep 24, 2002 at 06:36:10AM -0400, Rishi L Khan wrote:
> > Are you sure that they portscanned you and not someone faking that IP?
> There'd have to be one *seriously* misconfigured router out there to
> allow such a thing to work.  Otherwise, they'd never get the results of
> their portscan back.  Its far more likely that a box on that netblock
> was compromised and used for scanning purposes.
> noah

Not necessarily.

Read about the "idlescan" option of nmap(1) or

It could be that Intel's machines are just being used without being
owned by the person who is scanning you.

Erik Rossen                          ^    OpenPGP key: 2935D0B9
rossen@freesurf.ch                  /e\   "Use GnuPG, see the
http://people.linux-gull.ch/rossen  ---    black helicopters."

Reply to: