myNetWatchman *Port* Report 12-Apr-2001 - Article 288 - go-pugleaf

Article View: comp.security.firewalls

Article #288

Back to comp.security.firewalls Previous Next

myNetWatchman Port Report 12-Apr-2001

#288

From: Lawrence Baldwin
Date: Thu, 12 Apr 2001 06:10

24 lines
1815 bytes

Here is an update on the latest trends in port scan activity as captured by the myNetWatchman 
server:

Inreasing: http://www.mynetwatchman.com/mynetwatchman/topportincrease.asp

RPC, DNS (tcp), and Netbios Name Service probes made modest gains (+24%, +71%, +33%)

printer (515/tcp) aka LPRng Exploit has up nearly 400% and is fast becoming the top target


Decreasing:

http://www.mynetwatchman.com/mynetwatchman/topportdecrease.asp

RPC (UDP), SSH, Linuxconf went to near 0%

(Hopefully this means most have patched the known Linuxconf exploit) 

Note: Relative changes measure the difference in Percentage of attacks over the last week compared 
to the last month.
-- 
Lawrence Baldwin
myNetWatchman.com
Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm

Technical Details

Message-ID: <MPG.153f10ffc333a4149896a7@news2.mia.bellsouth.net>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!news-feed.riddles.org.uk!skynet.be!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news2.mia.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,ef77b84b9748560d,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: 1122a6,ef77b84b9748560d,start
X-Google-Attributes: gid1122a6,public
X-Google-ArrivalTime: 2001-04-11 23:16:04 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!news-feed.riddles.org.uk!skynet.be!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news2.mia.POSTED!not-for-mail
From: Lawrence Baldwin <baldwinl@mynetwatchman.com>
Newsgroups: comp.security.firewalls,bellsouth.net.support.adsl
Subject: myNetWatchman *Port* Report 12-Apr-2001
Message-ID: <MPG.153f10ffc333a4149896a7@news2.mia.bellsouth.net>
Organization: System Management Technologies, Inc.
X-Newsreader: MicroPlanet Gravity v2.50
Lines: 24
Date: Thu, 12 Apr 2001 02:10:57 -0400
NNTP-Posting-Host: 209.214.36.177
X-Trace: news2.mia 987055857 209.214.36.177 (Thu, 12 Apr 2001 02:10:57 EDT)
NNTP-Posting-Date: Thu, 12 Apr 2001 02:10:57 EDT