A lot of whisker attempts?

["Chris Mann" <CMann () stonebridgebank com>]

Has anyone else notices a lot of whisker attempts from a Korean ip
range
of 218.145.25.13? In the past few hours they've generated a few
thousand
alerts on our IDS. 

Packet dump is available if anyone is interested.



Kindest,

Christopher Mann
Systems Administrator
Stonebridge Bank
610.235.1515
cmann () stonebridgebank com
http://www.stonebridgebank.com

----------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place. http://www.securityfocus.com/BlackHat-incidents 
----------------------------------------------------------------------------