[Dshield] 2967/TCP (SSC-AGENT) Scans

Jon R. Kibler Jon.Kibler at aset.com
Sun Jan 7 19:11:09 GMT 2007


Hi,

Just looked at weekly scan stats. Port 2967/tcp is now the top blocked port and  almost 1.5x the number of VNC scans, the next most frequently scanned port. (Most amazing, ssh scans have dropped to 10th place!)

Is there a new Symantec exploit, or is this still trying to exploit the vulnerability first reported last summer?

Jon
-- 
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the list mailing list