nanog mailing list archives

RE: Scans and Probes Increasing?


From: "Eric Germann" <ekgermann () cctec com>
Date: Wed, 12 Sep 2001 07:01:11 -0400

Same  thing here, 15 fold increase this morning (by the IDS), and we're an
even smaller network.  Also seeing a lot more Sircam email. Don't know if
its a social issue (more stupid users are leaving their PC's on) or
engineered in.  Going to be another fun day ...


==========================================================================
  Eric Germann                                        CCTec
  ekgermann () cctec com                                 Van Wert OH 45801
  http://www.cctec.com                                Ph:  419 968 2640
                                                      Fax: 603 825 5893

"It is so easy to miss pretty trivial solutions to problems deemed
complicated.  The goal of a scientist is to find an interesting problem,
and live off it for a while.  The goal of an engineer is to evade
interesting problems :)"  -- Vadim Antonov <avg () kotovnik com> on NANOG




-----Original Message-----
From: owner-nanog () merit edu [mailto:owner-nanog () merit edu]On Behalf Of
mike harrison
Sent: Tuesday, September 11, 2001 10:15 PM
To: nanog () merit edu
Subject: Scans and Probes Increasing?




 Ok, we run a small network, but since this morning, the amount of
non-port-80 (CodeRed and Ilk) scans and probes and smurf attempts
have gone through the roof... no-holds barred scanning (not subtle
probing) from Tiawan, India and US (Cable/DSL mostly) IP's.

 Are other seeing it as well?  --mike--

==================----------------------------------------------------
meuon () geeklabs com        random thoughts + recycled electrons = email



Attachment: Eric Germann.vcf
Description:


Current thread: