View Single Post

  #3 (permalink)  
Old 09-17-2004
Skorpion
 
Posts: n/a
Default Re: new scan pattern?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Amadeus W.M. regaled us with the following:

> For the past couple of days I've been seeing a surge in scans like the one
> below. Does anybody have any info on this?
>
> 24.11.3.148 3127
> 24.11.3.148 2745
> 24.11.3.148 80
> 24.11.3.148 6129
> 24.11.3.148 1025
> 24.11.3.148 3127
> 24.11.3.148 2745
> 24.11.3.148 80
> 24.11.3.148 6129
> 24.11.3.148 1025
> 24.11.3.148 80
> 24.11.3.148 6129
> 24.11.3.148 3127
> 24.11.3.148 1025


I have no good info on this but thought I might mention that the repetition
of port numbers suggests "port knocking"...

- --
Skorpion [skorpion at suespammers dot org]
"Don't attribute to malice that which can be adequately explained by
stupidity."

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBShiVcTBCVvf50kkRAtqGAKCRktJf+AmHybAXvO5SNm BwU5ks2wCgwmiP
Sz0asiwih6ILPm4lLdKDAJo=
=NEr4
-----END PGP SIGNATURE-----
Reply With Quote