Re: Are automated scanners doing this ?

[phani () myrealbox com]

On Fri, Oct 25, 2002 at 08:16:52AM -0000, Jon wrote:
hi jon
> I occasionally use a linux box with a random IP address allocated by an ISP and with the majority 
> of services not available.  Over the last few months the rate of attempt to access this system has 
> gone from none (start of the year) to one attempt to access every two to three minutes of 
> on-line time.
>
> Is this normal ? The attempts come from a wide range of international IP addresses but with about 
> 40% from accounts within the ISP itself.
The scans of a dynamic IP could be random. This could be a port scanner at work.The reason for the increase in the 
scans could be anything from the host being up for a longer period of time, to the way the IP was assigned to you. I 
donot know how DHCP assigns the IPs , so may be someone else with that knowledge can help you out. I dont think there 
is a need for concern here .
HTH
phani