Re: new scan pattern?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Amadeus W.M. regaled us with the following:
> For the past couple of days I've been seeing a surge in scans like the one
> below. Does anybody have any info on this?
>
> 24.11.3.148 3127
> 24.11.3.148 2745
> 24.11.3.148 80
> 24.11.3.148 6129
> 24.11.3.148 1025
> 24.11.3.148 3127
> 24.11.3.148 2745
> 24.11.3.148 80
> 24.11.3.148 6129
> 24.11.3.148 1025
> 24.11.3.148 80
> 24.11.3.148 6129
> 24.11.3.148 3127
> 24.11.3.148 1025
I have no good info on this but thought I might mention that the repetition
of port numbers suggests "port knocking"...
- --
Skorpion [skorpion at suespammers dot org]
"Don't attribute to malice that which can be adequately explained by
stupidity."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBShiVcTBCVvf50kkRAtqGAKCRktJf+AmHybAXvO5SNm BwU5ks2wCgwmiP
Sz0asiwih6ILPm4lLdKDAJo=
=NEr4
-----END PGP SIGNATURE-----
|