[Snort-users] Todays Terrorist Attack
Ben N. Venzke
bvenzke at ...3417...
Wed Sep 12 09:33:06 EDT 2001
-----BEGIN PGP SIGNED MESSAGE-----
A number of "hackers" have begun calling for and attacking both Arab
nation state networks and terrorist related sites. If they begin to
meet with some success we can expect a significant response along the
lines of the attacks by pro-Palestinian actors during the
Israeli-Palestinian Cyber Conflict almost a year ago.
- Ben Venzke
>Keep posting more like this. We need to contain any possibility of escalation.
>At 11:38 AM 9/12/2001 -0400, Gordon Ewasiuk wrote:
>>On Yesterday, SecurityGauntlet wrote:
>>>Please place postings on any trends that make you suspicious of ANY future
>>>Terrorist Attacks to come.
>>Activity is increasing at this datacenter...
>>over 3 million individual attacks since 1700hrs EST yesterday (11Sept01).
>>Profiles include: Code Red, SMTP probes & overflow attempts
>>(passing large values during HELO, MAIL FROM, etc.), rpc stuff, as
>>well as ping sweeps and port scans.
>>Most of the bad guys are coming from APNIC IP blocks at this time.
>>Secondary suspects are from RIPE blocks in France as well as cable
>>modem/DSL block domestically.
Voice (703) 370-2962
Fax (703) 370-1571
Email - information at ...3418...
Web - http://www.intelcenter.com
PGP Public Key - available upon request
PO Box 22572
Alexandria, VA 22304-9257
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2
-----END PGP SIGNATURE-----
More information about the Snort-users