|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical RE: IDS Activity
The pattern looks like the usual Nimda/CodeRedI/CodeRedII stuff. The frequency of scans is upticking though. Whether its planned or is a social effect of possibly more machines on due to news, therefore more hosts for the scanners, is unknown. Just keeping an eye on things. Eric > -----Original Message----- > From: [email protected] [mailto:[email protected]]On Behalf Of > Christopher Wolff > Sent: Friday, October 12, 2001 1:26 AM > To: [email protected] > Subject: Re: IDS Activity > > > > I haven't seen the IDS trips; however there has been an anomalous > pattern of traffic on our border routers since 1400 MST. > > Please let me and the group know what you're seeing. > > ---------- Original Message ---------------------------------- > From: "Eric Germann" <[email protected]> > Reply-To: <[email protected]> > Date: Fri, 12 Oct 2001 01:03:43 -0400 > > >Anyone seeing a ramp up in IDS trips? We've seen an 8-10 fold > increase in > >the last two hours. > > > > > >================================================================= > ========= > > Eric Germann CCTec > > [email protected] Van Wert OH 45801 > > http://www.cctec.com Ph: 419 968 2640 > > Fax: 603 825 5893 > > > >"It is so easy to miss pretty trivial solutions to problems deemed > >complicated. The goal of a scientist is to find an interesting problem, > >and live off it for a while. The goal of an engineer is to evade > >interesting problems :)" -- Vadim Antonov <[email protected]> on NANOG > > > > > > > > > > > BEGIN:VCARD VERSION:2.1 N:Germann;Eric FN:Eric Germann ORG:CCTec TEL;WORK;VOICE:(419) 968-2640 TEL;WORK;FAX:(603) 825-5893 ADR;WORK:;;17780 Middle Point Road;Van Wert;OH;45891;United States of America LABEL;WORK;ENCODING=QUOTED-PRINTABLE:17780 Middle Point Road=0D=0AVan Wert, OH 45891=0D=0AUnited States of Americ= a URL: URL:http://www.cctec.com EMAIL;PREF;INTERNET:[email protected] REV:20010529T013421Z END:VCARD
|