[nsp-sec] tcp/23 increase

[Yiming Gong]

I see port 23 darknet scanning activities had a small jump yesterday 
then back to normal range today on our network.

+------------+--------------+
| date       | distinct sip |
+------------+--------------+
| 2010-01-05 |         1129 |
| 2010-01-06 |         1054 |
| 2010-01-07 |         1048 |
| 2010-01-08 |         1120 |
| 2010-01-09 |         1174 |
| 2010-01-10 |         1177 |
| 2010-01-11 |         1243 |
| 2010-01-12 |         1810 |  <--- small jump here
| 2010-01-13 |         1195 |
+------------+--------------+

Regards!

Yiming

Greenberg, David A wrote:
> ----------- nsp-security Confidential --------
>
>