On Sun, 11 Feb 2001, Kenneth E. Lussier wrote:
> I average 15-20 port scans a day, plus various blind connection attempts,
> DoS attack attempts, buffer overflow attempts, etc. I would kill to only
> have two failed connections in two days ;-)
I think I see just as many misconfigurations as I do attacks. It's amazing
some of the stuff you see on a shared wide-area network segment. People's SMB
servers, Novell servers, AppleTalk servers. Packets to or from RFC-1918
private IP subnets. More DHCP traffic than I could sort out. Dozens of
pieces of equipment or software in auto-discovery, service-announce, or other
network broadcast modes. Repeated, regular, obviously automated connection
attempts for various LAN services. Once it looked like someone thought my
machine was their default gateway.
I'm not sure which is worse: The blatant disregard for network security, or
the script kiddies taking advantage of it.
--
Ben Scott <[EMAIL PROTECTED]>
Net Technologies, Inc. <http://www.ntisys.com>
Voice: (800)905-3049 x18 Fax: (978)499-7839
**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************
