Re: scanning on port 901

[Craig Blaha <blaha () TCNJ EDU>]

We have three hosts identified (IP, MAC) but not the source. The unisog
discussion (thanks Steve) looks like my starting point...

Niedens, Travis wrote:

> Haven't seen it on our network, however, see a spike in traffic from the
> Internet Storm Center:
>
> http://isc.sans.org/port_details.html?port=901&tarax=1
>
> Are the sources all different?
>
> Thanks,
>
> Travis Niedens
> Network Manager
> University of Redlands
>
> -----Original Message-----
> From: Craig Blaha [mailto:blaha () TCNJ EDU]
> Sent: Wednesday, February 25, 2004 11:11 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] scanning on port 901
>
> Anyone else seeing this:
>
> scanning of hosts on port 901.  I've seen over 100,000 attempts in 1
> hour....
>
> Thanks,
> Craig Blaha
> --
>
>    *Craig Blaha*
>    /Associate Director
>    Information Policy, Security and Web Development/
>    The College of New Jersey
>    PO Box 7718
>    Ewing, NJ 08628
>    www.tcnj.edu
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion
> Group discussion list can be found at http://www.educause.edu/cg/.
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
> http://www.educause.edu/cg/.

--

   *Craig Blaha*
   /Associate Director
   Information Policy, Security and Web Development/
   The College of New Jersey
   PO Box 7718
   Ewing, NJ 08628
   www.tcnj.edu

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.