View Poll Results: Do you think these people deserve to be on the list?
- Voters
- 2. You may not vote on this poll
-
debwalin
-
confirmed_kill
-
i think everyone on there is fine even though some of them rarely post helpful information
-
No, i noticed that some of them get very extremly posotive posts for what seems to be nothing (they asked a question and got points for it or said \"giggle\" and got points for it)
-
March 10th, 2003, 02:01 PM
#1
Poll: Is it just me or..........
....... has anyone else noticed that the level of scan events that appear disassociated with automated worms such as slammer, Code Red etc. appears to have increased quite significantly over the last few weeks.
I seem to be seeing many more scans for SMTP, FTP, NetBios (137/9/445) than in the past year or so.
Or is it just me?
If you respond to the poll I would also be interested to know the region you are working from.
Don\'t SYN us.... We\'ll SYN you.....
\"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides
-
March 10th, 2003, 07:00 PM
#2
Greatly increased TCP Sync requests on 445 since 1/20/03
137 at a fairly rate for the last several months
Region: Washington DC area
-
March 10th, 2003, 07:53 PM
#3
A lot more Code Red hits (I thought it was dead ) on my office systems.
Heavy netbios scan on my home systems.
And recently 'scripted' attacks coming out of east Asia.
I am located in Western Canada.
Cheers:
-
March 10th, 2003, 07:59 PM
#4
Senior Member
I don't count for the long term as I just recently learned to read my logs but heavy netbios, slammer is slacking a little, and lots of noise(disassociated) that i don't understand yet. The hits have been increasing, steadily, though.
New England
the only way to fix it is to flush it all away-tool
-
March 10th, 2003, 08:54 PM
#5
Well.... So far it doesn't seem like it is just me...... I'd have hated it if it was.....
From those of you who have replied you seem to be seeing much the same as myself. I would be interested to hear from people that are outside the USA/Canada...... 'cos I can't help but think it might have a lot to do with the current political situation. In the past I have noticed spikes around significant events, (9/11 was a huge spike).
[Edit]
Oh....and yes I have to admit that Code Red does seem to be coming back to life again. Must be noobs putting utterly unpatched servers out there..... Or people redoing servers from scratch and not putting back patches that they originally had though I gotta think thats a bit far fetched.....
[/Edit]
Don\'t SYN us.... We\'ll SYN you.....
\"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|