PacketViper, LLC

GNL ADDED

GNL Added: Wikimedia Foundation, Inc. (WMF) is an American non-profit and charitable organization headquartered in San Francisco, California. It is mostly known for participating in the Wikimedia movement and owns the internet domain names of most movement projects and hosts sites like Wikipedia. The foundation was founded in 2003 by Jimmy Wales as a way to fund Wikipedia and its sister projects through non-profit means. Avail: 11/19/16

GNL ADDED

GNL Added: Bitly is a link management platform. The company Bitly, Inc. was established in 2008. It is privately held and based in New York City. Bitly shortens 600 million links per month, for use in social networking, SMS, and email. Bitly makes money by charging for access to aggregate data created as a result of many people using the shortened URLs. Avail: 11/11/16

PORT ALERT

HIGH SCAN VOLUME OF TCP 2323: Ongoing intensity of scans on TCP 2323, many originating from high risk countries as well as known offenders.

There are no known vulnerabilities in the common services on this port.  However, administrators may use this port to listen for telnet connections as an alternative to port 23/tcp adding a layer of obscurity to your defensive position.  It seems like the bad guys have caught on.

Create a Custom Rule blocking inbound TCP 2323 or, if you don’t already have one, create a Grouping named HIGH RISK PORT GROUP and add 2323/tcp to your HIGH RISK PORT GROUP.  If your organization makes use of this port, create strict PASS Custom Rules for those networks you wish to have access.

GNL ADDED

GNL Added: Verisign, Inc. is an American company based in Reston, Virginia, United States that operates a diverse array of network infrastructure, including two of the Internet’s thirteen root nameservers, the authoritative registry for the .com, .net, and .name generic top-level domains and the .cc and .tv country-code top-level domains, and the back-end systems for the .jobs, .gov, and .edu top-level domains. Avail: 11/08/16

PORT ALERT

INCREASED SCAN VOLUME TCP 8080: Vulnerabilities on this interface may allow an attacker to install Trojan Horse malware, creating a backdoor onto victimized networks.  This port is also commonly used as a pass through on proxy servers, allowing users to conceal their identity and IP address of origin.

Create a custom rule blocking inbound TCP 8080 or add this port to your HIGH RISK PORT GROUP.

PORT ALERT

INCREASED SCAN VOLUME TCP 1433: Vulnerabilities on this interface may allow it to serve as a vector for various worm-like malwares or for remote users to gain escalated privileges.

Create a custom rule blocking inbound TCP 1433 or add this port to your HIGH RISK PORT GROUP.

Please be aware that this port is also used for legitimate traffic related to Microsoft SQL Server.  For this reason, we advise some caution in the application of custom rules to your network.

PORT ALERT

HIGH SCAN VOLUME OF TCP 2323: Ongoing intensity of scans on TCP 2323, many originating from high risk countries as well as known offenders.

There are no known vulnerabilities in the common services on this port.  However, administrators may use this port to listen for telnet connections as an alternative to port 23/tcp adding a layer of obscurity to your defensive position.  It seems like the bad guys have caught on.

Create a Custom Rule blocking inbound TCP 2323 or, if you don’t already have one, create a Grouping named HIGH RISK PORT GROUP and add 2323/tcp to your HIGH RISK PORT GROUP.  If your organization makes use of this port, create strict PASS Custom Rules for those networks you wish to have access.

GNL ADDED

GNL Added: Dish Network (stylized as dish) is an American direct-broadcast satellite service provider. The company provides satellite television, satellite Internet access, audio programming, and interactive television services to commercial and residential customers in the United States. Avail: 10/22/16

GNL ADDED

GNL Added: Electronic Arts Inc. (EA), also known as EA Games, is an American video game company headquartered in Redwood City, California. Founded and incorporated on May 28, 1982 by Trip Hawkins, the company was a pioneer of the early home computer games industry and was notable for promoting the designers and programmers responsible for its games. As of 2014, Electronic Arts was the world’s fourth-largest gaming company by revenue after Tencent, Sony and Microsoft. Avail: 10/19/16

PORT ALERT

HIGH TRAFFIC VOLUME ON TCP 33958: Ongoing intensity of scans on TCP 33958, many originating from high risk countries as well as known offenders and vulnerable hosting services.

Distributed attacks may indicate a network of compromised machines communicating or scanning on TCP 33958.

Create a Custom Rule blocking inbound TCP 33958 or, if you don’t already have one, create a Grouping named HIGH RISK PORT GROUP and add 33958/tcp to your HIGH RISK PORT GROUP.