Security Incidents mailing list archives
Re: Slow SNMP scan...
From: Borja Marcos <borjam () sarenet es>
Date: Mon, 18 Feb 2002 11:36:45 +0100
On Monday 18 February 2002 10:35, Borja Marcos wrote:
Feb 13 20:55:39 195.77.170.25(2079) -> 192.52.153.240(161) Feb 13 21:14:56 195.77.170.25(2079) -> 192.52.153.241(161)(...) I will get back to the list with the result
Confirmed. They have stopped the JetAdmin program and I have not detected further SNMP probes. It was a misconfigured discovery feature. BTW, before someone blames us... they are not our customers. I have phoned them because I have deteted the activity and a slow scan seems to be hostile. Borja. -- __________________________________________________________________ Borja Marcos * borjam () sarenet es Responsable de seguridad * Tel: +34 944209470 SARENET S.A. * Fax: +34 944209465 Parque Tecnologico, 103 * 48170 - Zamudio (Bizkaia) SPAIN * __________________________________________________________________ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Slow SNMP scan... Jay Quinby (Feb 15)
- Re: Slow SNMP scan... Jim Watt (Feb 16)
- Re: Slow SNMP scan... Borja Marcos (Feb 18)
- Re: Slow SNMP scan... Russell Fulton (Feb 20)
- Re: Slow SNMP scan... Borja Marcos (Feb 18)
- Re: Slow SNMP scan... Jim Watt (Feb 18)
- DoS attack Jason Robertson (Feb 18)
- Re: Slow SNMP scan... Borja Marcos (Feb 18)
- Re: Slow SNMP scan... Jim Watt (Feb 16)