Re: Abnormally high Sub-Seven attack rate increase

• Previous message: Kevin Reardon: "Re: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Eric Kimminau wrote:
> 
> Howdy all!
> 
> Is it just me or has the number of Sub-Seven probes grown
> astronomically in the last 7 days? I am seeing on average 25-30
> clients per day, each scanning 3 or 4 times each up from only 1 or 2
> per day at most for the last several months.

We had nearly 100000 since New Year's Eve:

    deny tcp any any eq 27374 log (96669 matches)

Jeff

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

• Next message: James C Slora Jr: "RE: Abnormally high Sub-Seven attack rate increase"
• Previous message: Kevin Reardon: "Re: What constitutes authorized server access? - was Re: RPAT - Realtime Proxy Abuse Triangulation"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jan 02 2003 - 18:49:06 PST