Incidents
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Source port 445,80 Sep 07 2007 07:24AM
scott (redhowlingwolves bellsouth net)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I would suggest trying to isolate the box that is sending these
scans.It has characteristics of a worm,obviously.

The switch or router that is seeing this traffic would be where I
would start looking.

If you can find what part of the network it origin...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus