Sudden increase in scans.

[rune () TRANS4MEDIA COM (Rune Kristian Viken)]

There has suddenly been an enourmous increase of scans aimed at my network.  It
started 14 / 07 has been increasing ever since.

It started out with a single 'socks' scan the 14'th.  Then socks(again) and
sunrpc the 15th, ftp and dns the 16th.. then it exploded

The 17th, we had the following scans:

2. scans of port 1243 with 11 mins in between
1. scan of port 20034
30(!). scans of port 5500 , starting out at 17:30 (local time) and proceding
with intervals from 5 mins to 30 minutes throuhgout the day

18th:

47. scans of port 5500 from 00:00 to 11:12 (!!)
1. scan of 400

19:
3. scans of port 5500, not at a specific time
2. scans of port 2835 (within 10 seconds)


--
"Rune Kristian Viken" <rune () trans4media com> <http://arcade.kvinesdal.com>
System, Network & Security Administrator.  Phone: (+47) 92 85 34 38