l9explore and LeakIX Internet wide recon scans., (Wed, Aug 3rd)
Earlier today, I noticed a scan for an odd set of vulnerabilities from
Continue reading l9explore and LeakIX Internet wide recon scans., (Wed, Aug 3rd)
Author Archives: SANS Internet Storm Center, InfoCON: green
ISC Stormcast For Wednesday, August 3rd, 2022 https://isc.sans.edu/podcastdetail.html?id=8114, (Wed, Aug 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, August 3rd, 2022 https://isc.sans.edu/podcastdetail.html?id=8114, (Wed, Aug 3rd)
Increase in Chinese “Hacktivism” Attacks, (Tue, Aug 2nd)
With the US Speaker of the House, Nancy Pelosi, approaching an unusually high-level visit to China, various reports indicate an increase in military saber-rattling and a ramp-up of attacks against networks in Taiwan and the US.
Continue reading Increase in Chinese “Hacktivism” Attacks, (Tue, Aug 2nd)
A Little DDoS in the Morning – Followup, (Tue, Aug 2nd)
I love it when people read and learn from what I am writing here. And it looks like whoever is behind the little DDoS from Friday did just that. I removed our filters yesterday after the attack stopped, and today see similar traffic … but… now with different user agents ;-). At this point, the traffic isn';t causing any performance issues, so I will let them go for now.
Continue reading A Little DDoS in the Morning – Followup, (Tue, Aug 2nd)
ISC Stormcast For Tuesday, August 2nd, 2022 https://isc.sans.edu/podcastdetail.html?id=8112, (Tue, Aug 2nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, August 2nd, 2022 https://isc.sans.edu/podcastdetail.html?id=8112, (Tue, Aug 2nd)
A Little DDoS In the Morning, (Mon, Aug 1st)
Friday morning (at least it wasn&#;x26;#;39;t Friday afternoon), we got an alert that our database and web servers exceeded the expected load. Sometimes, this “happens.” Often it is just some user innocently flooding our API with requests. We do use quite a bit of caching and such for requests, but it can happen that things pile up at the wrong time. So I took a look at the logs. In these cases, I first look at the top IPs sending requests to our API. The first IP that stood out was %ip:137.189.8.184%%. At the time, it had sent about 6,000 requests in 3 hrs. Nothing that would typically cause problems. But the requests themselves didn&#;x26;#;39;t make much sense. A small sample:
Continue reading A Little DDoS In the Morning, (Mon, Aug 1st)
ISC Stormcast For Monday, August 1st, 2022 https://isc.sans.edu/podcastdetail.html?id=8110, (Mon, Aug 1st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, August 1st, 2022 https://isc.sans.edu/podcastdetail.html?id=8110, (Mon, Aug 1st)
Wireshark 3.6.7 Released, (Sat, Jul 30th)
Wireshark version 3.6.7 was released. It fixes 9 bugs.
Wireshark 3.6.7 Released, (Sat, Jul 30th)
Wireshark version 3.6.7 was released. It fixes 9 bugs.
PDF Analysis Intro and OpenActions Entries, (Fri, Jul 29th)
This diary was contributed by Jesse La Grew
Continue reading PDF Analysis Intro and OpenActions Entries, (Fri, Jul 29th)