RE: Subseven Scans

From: Robert Buckley (rbuckley@synapsemail.com)
Date: 08/15/02


From: Robert Buckley <rbuckley@synapsemail.com>
To: 'Rob Keown' <Keown@MACDIRECT.COM>, incidents@securityfocus.com
Date: Thu, 15 Aug 2002 07:42:14 -0400

All,
        I apologize for letting this thread become so cluttered. The
personal pronouns and negative yet challenging connotations bury the initial
question, which was:

Anyone else seeing a huge increase in subseven scans...6708 since about
0300Z - across all of my class C's and from quite a few sources (running the
query now to see how many).

Rob, back to your original post, and my RE: with the shadow report attached.
Did you find any of the information on the report helpful to you?
Were you able to match addresses from the report to what your seeing?
Were you able to see the same type of timing pattern?

r.b.

-----Original Message-----
From: Rob Keown [mailto:Keown@MACDIRECT.COM]
Sent: Sunday, August 11, 2002 9:43 AM
To: incidents@securityfocus.com
Subject: Subseven Scans

Anyone else seeing a huge increase in subseven scans...6708 since about
0300Z - across all of my class C's and from quite a few sources (running the
query now to see how many).

Rob

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com



Relevant Pages

  • RE: A small quandary
    ... This list is provided by the SecurityFocus ARIS analyzer service. ... and tracking system please see: http://aris.securityfocus.com ... For more information on this free incident handling, management ...
    (Incidents)
  • RE: Anyone seen this before?
    ... The answer to this is, in task manager, you can right click on any app ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: Code Red - A Possible Origin?
    ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: Code Red - A Possible Origin?
    ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: fbi.gov weirdness?
    ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > For more information on this free incident handling, management ... > and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)