Re: Slow SNMP scan...

From: Borja Marcos (borjamat_private)
Date: Mon Feb 18 2002 - 02:36:45 PST

  • Next message: Jim Watt: "Re: Slow SNMP scan..."

    On Monday 18 February 2002 10:35, Borja Marcos wrote:
    > > Feb 13 20:55:39   195.77.170.25(2079) -> 192.52.153.240(161)
    > > Feb 13 21:14:56   195.77.170.25(2079) -> 192.52.153.241(161)
    > (...)
    > 	I will get back to the list with the result
    
    	Confirmed. They have stopped the JetAdmin program and I have not detected 
    further SNMP probes. It was a misconfigured discovery feature.
    
    	BTW, before someone blames us... they are not our customers. I have phoned 
    them because I have deteted the activity and a slow scan seems to be hostile.
    
    
    
    
    	Borja.
    
    -- 
    __________________________________________________________________
    Borja Marcos                      * borjamat_private
    Responsable de seguridad          * Tel: +34 944209470
    SARENET S.A.                      * Fax: +34 944209465
    Parque Tecnologico, 103           *
    48170 - Zamudio (Bizkaia) SPAIN   *
    __________________________________________________________________
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Feb 18 2002 - 23:50:23 PST