Re: Slow SNMP scan...

[Borja Marcos <borjam () sarenet es>]

On Monday 18 February 2002 10:35, Borja Marcos wrote:
> > Feb 13 20:55:39   195.77.170.25(2079) -> 192.52.153.240(161)
> > Feb 13 21:14:56   195.77.170.25(2079) -> 192.52.153.241(161)
> (...)
>       I will get back to the list with the result

        Confirmed. They have stopped the JetAdmin program and I have not detected 
further SNMP probes. It was a misconfigured discovery feature.

        BTW, before someone blames us... they are not our customers. I have phoned 
them because I have deteted the activity and a slow scan seems to be hostile.




        Borja.

-- 
__________________________________________________________________
Borja Marcos                      * borjam () sarenet es
Responsable de seguridad          * Tel: +34 944209470
SARENET S.A.                      * Fax: +34 944209465
Parque Tecnologico, 103           *
48170 - Zamudio (Bizkaia) SPAIN   *
__________________________________________________________________

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com