Security Incidents mailing list archives

Re[2]: Subseven Scans


From: Preston Kutzner <grdnwsl () mrichi com>
Date: Mon, 12 Aug 2002 13:41:35 -0500

Hello Ben,

Monday, August 12, 2002, 11:32:48 AM, you wrote:

BL> Sunday, August 11, 2002, 3:42:50 PM, you wrote:

Anyone else seeing a huge increase in subseven scans...6708 since about
0300Z - across all of my class C's and from quite a few sources (running the
query now to see how many). 

BL> Yes, the firewall log on our network is also filling with sub7 scan's
BL> since August 10.

BL> Kid's are having vacation these day's....they feel bored.




On a somewhat related topic, I've also been seeing quite a bit of
GateCrasher traffic tcp/6970 lately.

--
Preston Kutzner | IT Manager
Marketing Resources, Inc.

_________________________________________________________________
The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material.  Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited.   If you received
this in error, please contact the sender and delete the material from any
computer.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: