[Dshield] Re: Lots 'n' Lots of attacks... (fwd)

Johannes B. Ullrich jullrich at euclidian.com
Thu Oct 4 00:07:04 GMT 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> Some other resources:
> http://www.arin.net/cgi-bin/whois.pl is a web-based whois
> lookup for the ARIN database.

see also http://www.dshield.org/ipinfo.php

it will not only query ARIN, but the other regions (APNIC, RIPE,
KRNIC, ...) as well.

And it will show a bit of DShield info about the IP..

Regarding Hackerwhacker: They made the DShield top ten attacker list
farily early (within a month or so after DShield was launched. By now,
they are on our list of 'known scanners' so reports implicating them are
automatically discarded.

  Johannes.



- --
- -------
jullrich at sans.org                    Join http://www.DShield.org
                                     Distributed Intrusion Detection System

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7u2srVOIizK5pIDMRAjKUAKDJz46Vq4C0k+rhI0dj3nCHr0xN5ACg1hdI
H99ryD2fOsRpDHent8HauEM=
=iOAg
-----END PGP SIGNATURE-----





More information about the list mailing list