Re: a fun new tool from us...

[Bill_Royds () pch gc ca]

I had a cable modem installed over the Easter weekend but I left the machine
mostly off last week
. I also installed Back Officer last Friday. This weekend it alerted me to 2
Back Orifice scans (both from  an M.I.T. frat residence).





"Marcus J. Ranum" <mjr () nfr net> on 99-04-08 12:41:21 PM

Please respond to "Marcus J. Ranum" <mjr () nfr net>

To:   firewall-wizards () nfr net
cc:    (bcc: Bill Royds/HullOttawa/PCH/CA)
Subject:  a fun new tool from us...




Greetings -

     I've recently completed development and testing on a new
tool which you can download from our website. It's a lightweight
intrusion/scan detection agent for UNIX and Windows. Specifically,
it's targetted at getting an idea of how much Back Orifice traffic
is out there, and how often people are scanned (answer so far: a lot,
and often) We (law enforcement, me, and a few friends) have already
used it a couple times to bust script-kiddies. It's really useful
as an educational tool for those who think that they're safe or
not a target if they stay dialed-up to the Internet all day. I'd
love to hear any results from a cable-modem connected user, to see
if hackers are scanning there yet or not.