Comments for Norwegian Honeynet Project

Comment on Malware unpacking in OllyDbg by Malware unpacking in OllyDbg « 0day in {REA_TEAM}

Malware unpacking in OllyDbg « 0day in {REA_TEAM} — Thu, 28 Jan 2010 04:08:56 +0000

[...] Norwegian Honeynet Project » Blog Archive » Malware unpacking in OllyDbg. Leave a [...]

Comment on Analysing malicious PDF documents and shellcode by Analysing malicious PDF documents and shellcode « 0day in {REA_TEAM}

Analysing malicious PDF documents and shellcode « 0day in {REA_TEAM} — Thu, 28 Jan 2010 04:02:44 +0000

[...] Norwegian Honeynet Project » Blog Archive » Analysing malicious PDF documents and shellcode. Leave a [...]

Comment on VoIP attacks are escalating by VOIP Scanning and Attacks on the Increase | Vocati Communications, Inc.

VOIP Scanning and Attacks on the Increase | Vocati Communications, Inc. — Mon, 09 Nov 2009 01:10:47 +0000

[...] VoIP scanning traffic. Arbor Networks mentioned VoIP attacks as one of their increasing concerns. A Norwegian honeynet detected various INVITE requests trying to get VoIP systems on the internet to dial specific numbers. This [...]

Comment on Citibank UK number was target for a “lawnmower” telephone attack today! by david hiers

david hiers — Wed, 14 Oct 2009 19:42:12 +0000

I’ll post this link to the voiceops group.

Comment on Country Lookup by Tor Inge Skaar

Tor Inge Skaar — Sat, 26 Sep 2009 22:35:30 +0000

Daniel, very nice!

Comment on Country Lookup by Daniel Austin MBCS

Daniel Austin MBCS — Sat, 26 Sep 2009 22:05:28 +0000

Ok, my BGP lookup tool now lists both IPv4 and IPv6 prefixes.

There’s no way to ask for a specific type right now, but it’s simple… if you only want IPv6 prefixes, only select items that contain “:” – if you only want IPv4 prefixes, only select items that contain “.” :-)

Enjoy.

Comment on Country Lookup by Daniel Austin MBCS

Daniel Austin MBCS — Fri, 25 Sep 2009 08:28:46 +0000

I will see if I can obtain some IPv6 BGP feeds, and modify my bgplookup tool to include IPv6 too.

Give me a couple of weeks :-)

Comment on Citibank UK number was target for a “lawnmower” telephone attack today! by Shueib

Shueib — Thu, 24 Sep 2009 01:27:54 +0000

I think the attacker was testing this attack and that is why he choose an odd time like Sunday 5 am so that he would get noticed and then if the attack is successful, then he may intend to try out this on a larger scale on any working day.

Yes, This is bad and major Voip applicance vendors should get this fixed.

Comment on Using Nmap to scan for Conficker by Tor Inge Skaar

Tor Inge Skaar — Sun, 19 Jul 2009 18:22:22 +0000

Indeed! And now Nmap 5 has been released, with a huge number of improvements, bug fixes and new features (the conficker script remains naturally included).

Comment on Using Nmap to scan for Conficker by Vinoth

Vinoth — Sun, 19 Jul 2009 15:38:25 +0000

I use NMAP for many troubleshooting purpose. This feature is awesome. Thanks to Fyodor:-)