|
||||||||||
Ditto, and the tool to send reports to mynetwatchman is cool too. Kinda scary sometimes. Here is just a few from today for me, not my whole list. Incident Id Source IP Responsible Domain Incident Score Total Agent Count Total Event Count Top Issue Incident Status ISP Response 169848150<http://www.mynetwatchman.com/LID.asp?IID=169848150> 219.132.16.242 <http://219.132.16.242>chinanet.cn.net<http://chinanet.cn.net> 2554504085869SQL Slammer WormEscalatedNo Response173782497<http://www.mynetwatchman.com/LID.asp?IID=173782497> 61.153.143.164 <http://61.153.143.164>chinanet.cn.net<http://chinanet.cn.net> 2523404155186SQL Slammer WormEscalatedNo Response169729406<http://www.mynetwatchman.com/LID.asp?IID=169729406> 60.18.168.25 <http://60.18.168.25>cnc-noc.net <http://cnc-noc.net>246060413 5819SQL Slammer WormEscalatedNo Response168839621<http://www.mynetwatchman.com/LID.asp?IID=168839621> 199.203.54.218 <http://199.203.54.218>netvision.net.il<http://netvision.net.il> 2054702943643SQL Slammer WormEscalatedNo Response172917531<http://www.mynetwatchman.com/LID.asp?IID=172917531> 61.139.37.28 <http://61.139.37.28>chinanet.cn.net <http://chinanet.cn.net> 1814003223215SQL Slammer WormEscalatedNo Response172098225<http://www.mynetwatchman.com/LID.asp?IID=172098225> 202.103.213.148 <http://202.103.213.148>chinanet.cn.net<http://chinanet.cn.net> 1681003052337SQL Slammer WormEscalatedNo Response173678170<http://www.mynetwatchman.com/LID.asp?IID=173678170> 218.17.224.196 <http://218.17.224.196>chinanet.cn.net<http://chinanet.cn.net> 49350127164Spida WormEscalatedNo Response173576496<http://www.mynetwatchman.com/LID.asp?IID=173576496> 166.70.89.206 <http://166.70.89.206>xmission.com <http://xmission.com>36400 93135RAdmin ProbeEscalatedNo Response174245448<http://www.mynetwatchman.com/LID.asp?IID=174245448> 63.208.1.139 <http://63.208.1.139>iglobalnetworks.com<http://iglobalnetworks.com> 2660054249mySQL ExploitEscalatedNo Response174738679<http://www.mynetwatchman.com/LID.asp?IID=174738679> 61.129.51.41 <http://61.129.51.41>chinanet.cn.net <http://chinanet.cn.net> 2081052123SQL Slammer WormEscalatedNo Response On 8/29/05, Don Munyak <don dot munyak at gmail dot com> wrote: > > http://www.wallwatcher.com/ > > Been using it in production for a while. Very cool stuff. > > - Don > > --------------------------------------------------------------------- > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > |