Canned scan?

From: gattacaat_private
Date: Fri May 18 2001 - 08:45:13 PDT

Next message: Jeff Kell: "Re: Strange email"

Previous message: Daniel Martin: "Re: Hiding the source of the web server scan"
Reply: Joe Matusiewicz: "Re: Canned scan?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello all,

I have a curiousity question. In the last 24 hours I have seen scans for 
the following ports. They have been from multiple addresses at different 
times. The scans have been the same ports and sequence each time which leads 
me to suspect a canned scan tool.  Is this something new? Thanks in advance. 

cheers,
gattaca

<snip>
Fri May 18 10:36:30 EDT 2001 (snip filter file command) reports 
211.218.149.27 DENIED HOST 
(tcp ports) 
31337 11753 12754 2400 33567 5300 1008 1524 29369 9112 6723 6635 8282 9705 
10008 15104 3879 22252 60008
</snip>
Free, encrypted, secure Web-based email at www.hushmail.com

Next message: Jeff Kell: "Re: Strange email"
Previous message: Daniel Martin: "Re: Hiding the source of the web server scan"
Reply: Joe Matusiewicz: "Re: Canned scan?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri May 18 2001 - 12:47:05 PDT