Re: Slow SNMP scan...

From: Borja Marcos (borjam@sarenet.es)
Date: 02/18/02 

From: Borja Marcos <borjam@sarenet.es>
To: Jim Watt <wattjg@appliedbiosystems.com>
Date: Mon, 18 Feb 2002 11:36:45 +0100

On Monday 18 February 2002 10:35, Borja Marcos wrote:
> > Feb 13 20:55:39 195.77.170.25(2079) -> 192.52.153.240(161)
> > Feb 13 21:14:56 195.77.170.25(2079) -> 192.52.153.241(161)
> (...)
> I will get back to the list with the result

        Confirmed. They have stopped the JetAdmin program and I have not detected
further SNMP probes. It was a misconfigured discovery feature.

        BTW, before someone blames us... they are not our customers. I have phoned
them because I have deteted the activity and a slow scan seems to be hostile.

        Borja. 

-- 
__________________________________________________________________
Borja Marcos                      * borjam@sarenet.es
Responsable de seguridad          * Tel: +34 944209470
SARENET S.A.                      * Fax: +34 944209465
Parque Tecnologico, 103           *
48170 - Zamudio (Bizkaia) SPAIN   *
__________________________________________________________________

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Quantcast