Security Incidents mailing list archives

two port scans

From: Robert Collins <robert.collins () ITDOMAIN COM AU>
Date: Wed, 30 Aug 2000 10:00:44 +1100

I've seen two port scans this week.
208.5.42.164 scanning port 137
202.30.115.58 scanning port 109

Both scanned my /25 net end to end

I couldn't get anything useful from whois. Anyone else seen these boxen
scanning/ know of recent toolkits or breakages they migh tbe scanning
for?

Rob

Current thread:

two port scans Robert Collins (Aug 30)
- Re: two port scans martin j. muench (Aug 30)
- Re: detecting "trinity v3 by self" DDoS agent Philippe Bourcier (Aug 31)
- Re: two port scans Ralf G. R. Bergs (Aug 31)
- <Possible follow-ups>
- Re: two port scans Robert Collins (Aug 31)
- Re: two port scans Forrester, Mike (Aug 31)