[Dshield] Increase in Sub Seven's

Lijster. Mario de Mdlijster at Prioritytelecom.com
Tue Jun 18 12:54:21 GMT 2002


Paul,
 
Yes, I get them too, but since may and from all over the globe.
But it seems they come in "batches". Some day's I see five to ten of them, some days none.
In May I even had Sub Seven's arriving, directly followed by Netbus's from the same addresses.
 
It looks like some new bots to me, but thats just my 2 cents...
 
Regards,
Mario

-----Original Message-----
From: Paul Marsh [mailto:pmarsh at nmefdn.org]
Sent: maandag 17 juni 2002 14:23
To: 'Dshield (E-mail)
Subject: [Dshield] Increase in Sub Seven's



Has anyone seen and increase in Sub Seven's over the weekend? 

06/16/2002 19:28:44.736 Sub Seven Attack Dropped 68.47.89.33, 1062, WAN xxx.xxx.xxx.xxx, 27374, LAN        
06/16/2002 19:24:00.096 Sub Seven Attack Dropped 66.190.195.68, 1492, WAN xxx.xxx.xxx.xxx, 27374, LAN               
06/16/2002 18:35:20.208 Sub Seven Attack Dropped 68.55.248.219, 4354, WAN xxx.xxx.xxx.xxx, 27374, LAN      
06/16/2002 18:21:42.608 Sub Seven Attack Dropped 66.58.129.16, 4291, WAN xxx.xxx.xxx.xxx, 27374, LAN          
06/16/2002 18:17:26.880 Sub Seven Attack Dropped 68.65.162.145, 3873, WAN xxx.xxx.xxx.xxx, 27374, LAN     
06/16/2002 18:04:21.608 Sub Seven Attack Dropped 24.186.87.244, 1906, WAN xxx.xxx.xxx.xxx, 27374, LAN          
06/16/2002 17:59:36.064 Sub Seven Attack Dropped 68.37.45.210, 3101, WAN xxx.xxx.xxx.xxx, 27374, LAN     
06/16/2002 17:55:41.496 Sub Seven Attack Dropped 24.166.84.49, 1796, WAN xxx.xxx.xxx.xxx, 27374, LAN          
06/16/2002 17:41:51.304 Sub Seven Attack Dropped 12.215.144.168, 1308, WAN xxx.xxx.xxx.xxx, 27374, LAN           
06/16/2002 17:09:18.576 Sub Seven Attack Dropped 66.189.232.222, 2889, WAN xxx.xxx.xxx.xxx, 27374, LAN          
06/16/2002 16:51:20.336 Sub Seven Attack Dropped 24.131.21.86, 1933, WAN xxx.xxx.xxx.xxx, 27374, LAN          
06/16/2002 16:29:02.288 Sub Seven Attack Dropped 142.177.21.127, 4241, WAN xxx.xxx.xxx.xxx, 27374, LAN   

Thanx, Paul 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.dshield.org/pipermail/list/attachments/20020618/2a818f2f/attachment.htm


More information about the list mailing list