CRv2 multiple scans from same source IP

From: John Davidson (jwd_odsat_private)
Date: Sun Aug 05 2001 - 17:39:14 PDT

  • Next message: Luc Pardon: "Re: CRv2 multiple scans from same source IP"

    My W2k IIS logs show 3 CRv2 scans from the same source IP within the same
    minute.
    
    The IP is outside my Class A address space. From the analysis of CRv2
    published at www.eeye.com this should not be possible, or at least the
    likelihood of such an occurence is much greater than winning a very big
    lottery... I should maybe buy a ticket! ;-).
    
    
    John Davidson
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Sun Aug 05 2001 - 19:49:25 PDT