Poll: Is it just me or..........

View Poll Results: Do you think these people deserve to be on the list?

Voters
2. You may not vote on this poll
  • debwalin

    0 0%
  • confirmed_kill

    0 0%
  • i think everyone on there is fine even though some of them rarely post helpful information

    0 0%
  • No, i noticed that some of them get very extremly posotive posts for what seems to be nothing (they asked a question and got points for it or said \"giggle\" and got points for it)

    2 100.00%
Results 1 to 5 of 5

Thread: Poll: Is it just me or..........

  1. #1
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197

    Poll: Is it just me or..........

    ....... has anyone else noticed that the level of scan events that appear disassociated with automated worms such as slammer, Code Red etc. appears to have increased quite significantly over the last few weeks.

    I seem to be seeing many more scans for SMTP, FTP, NetBios (137/9/445) than in the past year or so.

    Or is it just me?

    If you respond to the poll I would also be interested to know the region you are working from.
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  2. #2
    Member GandalfTheGray's Avatar
    Join Date
    Jan 2003
    Posts
    96
    Greatly increased TCP Sync requests on 445 since 1/20/03

    137 at a fairly rate for the last several months

    Region: Washington DC area

  3. #3
    I'd rather be fishing DjM's Avatar
    Join Date
    Aug 2001
    Location
    The Great White North
    Posts
    1,867
    A lot more Code Red hits (I thought it was dead ) on my office systems.

    Heavy netbios scan on my home systems.

    And recently 'scripted' attacks coming out of east Asia.

    I am located in Western Canada.


    Cheers:
    DjM

  4. #4
    Senior Member
    Join Date
    Jan 2003
    Posts
    242
    I don't count for the long term as I just recently learned to read my logs but heavy netbios, slammer is slacking a little, and lots of noise(disassociated) that i don't understand yet. The hits have been increasing, steadily, though.
    New England
    the only way to fix it is to flush it all away-tool

  5. #5
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    Well.... So far it doesn't seem like it is just me...... I'd have hated it if it was.....

    From those of you who have replied you seem to be seeing much the same as myself. I would be interested to hear from people that are outside the USA/Canada...... 'cos I can't help but think it might have a lot to do with the current political situation. In the past I have noticed spikes around significant events, (9/11 was a huge spike).

    [Edit]

    Oh....and yes I have to admit that Code Red does seem to be coming back to life again. Must be noobs putting utterly unpatched servers out there..... Or people redoing servers from scratch and not putting back patches that they originally had though I gotta think thats a bit far fetched.....

    [/Edit]
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •