As of yesterday 6-11-2001 we too have seen a dramatic increase (25) scans for 27374 also. Before yesterday we only saw them once or twice a week. E > Since February, I've been receiving tcp port scans for the default sub7 port > (27374) at a rate of approximately 3-4 per day. Starting on June 8th to > present, I've been receiving them at 9 times that rate. > > 6/5/01 - 3 Scans > 6/6/01 - 4 Scans > 6/7/01 - 3 Scans > 6/8/01 - 8 Scans > 6/9/01 - 14 Scans > 6/10/01 - 38 Scans > 6/11/01 - 22 Scans > > Any ideas on what could have sparked this increased scanning? A new > utility? A new vulnerability related to sub7? New media publicity? > > Thanks > > Jack E. Obert, GSEC > Technical Information Security Officer > St. John's Health System >
This archive was generated by hypermail 2b30 : Tue Jun 12 2001 - 09:32:53 PDT