[41792] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RE: Scans and Probes Increasing?

daemon@ATHENA.MIT.EDU (Eric Germann)
Wed Sep 12 07:06:29 2001

Reply-To: <ekgermann@cctec.com>
From: "Eric Germann" <ekgermann@cctec.com>
To: "mike harrison" <meuon@highertech.net>, <nanog@merit.edu>
Date: Wed, 12 Sep 2001 07:01:11 -0400
Message-ID: <NDBBJJPLIGJGLBKILFIHMENHDOAA.ekgermann@cctec.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_004D_01C13B58.B4BF95E0"
In-Reply-To: <Pine.LNX.4.10.10109112211160.1784-100000@home.highertech.net>
Errors-To: owner-nanog-outgoing@merit.edu


This is a multi-part message in MIME format.

------=_NextPart_000_004D_01C13B58.B4BF95E0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

Same  thing here, 15 fold increase this morning (by the IDS), and we're an
even smaller network.  Also seeing a lot more Sircam email. Don't know if
its a social issue (more stupid users are leaving their PC's on) or
engineered in.  Going to be another fun day ...


==========================================================================
  Eric Germann                                        CCTec
  ekgermann@cctec.com                                 Van Wert OH 45801
  http://www.cctec.com                                Ph:  419 968 2640
                                                      Fax: 603 825 5893

"It is so easy to miss pretty trivial solutions to problems deemed
complicated.  The goal of a scientist is to find an interesting problem,
and live off it for a while.  The goal of an engineer is to evade
interesting problems :)"  -- Vadim Antonov <avg@kotovnik.com> on NANOG




> -----Original Message-----
> From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of
> mike harrison
> Sent: Tuesday, September 11, 2001 10:15 PM
> To: nanog@merit.edu
> Subject: Scans and Probes Increasing?
>
>
>
>
>  Ok, we run a small network, but since this morning, the amount of
> non-port-80 (CodeRed and Ilk) scans and probes and smurf attempts
> have gone through the roof... no-holds barred scanning (not subtle
> probing) from Tiawan, India and US (Cable/DSL mostly) IP's.
>
>  Are other seeing it as well?  --mike--
>
> ==================----------------------------------------------------
> meuon@geeklabs.com        random thoughts + recycled electrons = email
>
>
>

------=_NextPart_000_004D_01C13B58.B4BF95E0
Content-Type: text/x-vcard;
	name="Eric Germann.vcf"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
	filename="Eric Germann.vcf"

BEGIN:VCARD
VERSION:2.1
N:Germann;Eric
FN:Eric Germann
ORG:CCTec
TEL;WORK;VOICE:(419) 968-2640
TEL;WORK;FAX:(603) 825-5893
ADR;WORK:;;17780 Middle Point Road;Van Wert;OH;45891;United States of =
America
LABEL;WORK;ENCODING=3DQUOTED-PRINTABLE:17780 Middle Point =
Road=3D0D=3D0AVan Wert, OH 45891=3D0D=3D0AUnited States of Americ=3D
a
URL:
URL:http://www.cctec.com
EMAIL;PREF;INTERNET:ekgermann@cctec.com
REV:20010529T013421Z
END:VCARD

------=_NextPart_000_004D_01C13B58.B4BF95E0--


home help back first fref pref prev next nref lref last post