Intrusion detection (or lack of attempts)

jmn

Senior Member
Joined
Feb 19, 2005
Messages
551
Since my 2nd last reconnection about 4 days ago (last one 3,5 days ago on same IP as previous) I don't have a single entry in my IPCop Snort logs, used to get a few hundred every day. Firewall logs still have the same daily averages.

I'm not complaining, just find it weird :)
 

jmn

Senior Member
Joined
Feb 19, 2005
Messages
551
I knew I spoke / wrote too soon...
Barely posted it (a couple of seconds) and I got disconnected / reconnected, with BAD speeds :(

And snort gets hit again:
Date: 08/11 21:24:17 Name: (spp_stream4) STEALTH ACTIVITY (unknown) detection
Priority: n/a Type: n/a
IP info: 216.49.88.38:80 -> 196.2.12x.xx:4118
References: none found SID: n/a
 
Last edited:
Top