[Snort-users] Todays Terrorist Attack

Ben N. Venzke bvenzke at ...3417...
Wed Sep 12 09:33:06 EDT 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A number of "hackers" have begun calling for and attacking both Arab 
nation state networks and terrorist related sites. If they begin to 
meet with some success we can expect a significant response along the 
lines of the attacks by pro-Palestinian actors during the 
Israeli-Palestinian Cyber Conflict almost a year ago.

			- Ben Venzke


>Good Info,
>
>Keep posting more like this. We need to contain any possibility of escalation.
>Thanks again
>
>At 11:38 AM 9/12/2001 -0400, Gordon Ewasiuk wrote:
>
>>On Yesterday, SecurityGauntlet wrote:
>>
>>>Please place postings on any trends that make you suspicious of  ANY future
>>>Terrorist Attacks to come.
>>
>>Activity is increasing at this datacenter...
>>
>>over 3 million individual attacks since 1700hrs EST yesterday (11Sept01).
>>
>>Profiles include:  Code Red, SMTP probes & overflow attempts
>>(passing large values during HELO, MAIL FROM, etc.), rpc stuff, as
>>well as ping sweeps and port scans.
>>
>>Most of the bad guys are coming from APNIC IP blocks at this time.
>>Secondary suspects are from RIPE blocks in France as well as cable
>>modem/DSL block domestically.
>>

- -- 

______________________
IntelCenter
Voice (703) 370-2962
Fax (703) 370-1571
Email - information at ...3418...
Web - http://www.intelcenter.com
PGP Public Key - available upon request

PO Box 22572
Alexandria, VA 22304-9257
USA

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.2

iQA/AwUBO5+N6v76H8QHdGcYEQLIvACcD6jjWC1a/ms9dBknmvbeuOMxfpwAn0CQ
g65SQgG+zWYXCYTgbIorjLwQ
=eNVw
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list