Security Incidents mailing list archives

Canned scan?


From: gattaca () hushmail com
Date: Fri, 18 May 2001 10:45:13 -0500 (EDT)

Hello all,

I have a curiousity question. In the last 24 hours I have seen scans for 
the following ports. They have been from multiple addresses at different 
times. The scans have been the same ports and sequence each time which leads 
me to suspect a canned scan tool.  Is this something new? Thanks in advance. 

cheers,
gattaca

<snip>
Fri May 18 10:36:30 EDT 2001 (snip filter file command) reports 
211.218.149.27 DENIED HOST 
(tcp ports) 
31337 11753 12754 2400 33567 5300 1008 1524 29369 9112 6723 6635 8282 9705 
10008 15104 3879 22252 60008
</snip>
Free, encrypted, secure Web-based email at www.hushmail.com

Current thread: