Re: Surge in probes or coincidence?

[Phil Stracchino <alaric () BABCOM COM>]

On Wed, Mar 28, 2001 at 09:32:17AM -0600, Dave Elfering wrote:
> We don't normally see too much activity on our little segment, so I was
> surprised to see several probes in relatively close sequence to one another.
>
> One from Korea looking for port 111 (RPC), two from the european block
> addresses looking for FTP servers.
>
> Anyone else see a (relative) surge of activity from these sources?

I've been seeing huge number of probes over the past week or so to ports
111 and 511, and FTP.  I don't think it's just you.


Speaking of port 511 ....  what in finagle's name is the 'passgo' service?
That's what nmap-services lists port 511 as.


--
 Linux Now!   ..........Because friends don't let friends use Microsoft.
 phil stracchino   --   the renaissance man   --   mystic zen biker geek
    Vr00m:  2000 Honda CBR929RR   --   Cage:  2000 Dodge Intrepid R/T
 Previous vr00mage:  1986 VF500F (sold), 1991 VFR750F3 (foully murdered)