[Dshield] Coordinated Sub Seven Scan ?

Johannes Ullrich jullrich at sans.org
Mon Aug 12 02:00:53 GMT 2002


SubSeven scans are quite frequently carried out by IRC controled
bots. A common method is for the owner of a smaller bot net, to
target certain netblocks they think are the home of worthwhile
targets. Usually Cable and DSL networks, or Universities. If your
are on the targeted network, you will see a multitude of scans 
from these bots.

-- 
---------------------------------------------------------------
jullrich at sans.org             Collaborative Intrusion Detection
                                    join http://www.dshield.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://www.dshield.org/pipermail/list/attachments/20020811/b7471681/attachment.bin


More information about the list mailing list