Security Incidents mailing list archives

Increase in Port Scan Attempts?


From: Alex <incidents () alexolson com>
Date: Sun, 2 May 2004 17:12:21 -0500 (CDT)

I have noticed in the past week about 10 different port scan attempts by
various hosts.  I'm used to seeing entries of one host probing 
particular ports, but I'm seeing the same host repeatedly probing multiple
ports in a very short time. Most of them only log about 10-20 entries 
total in my firewall.    However, last sunday, I received 3000 attempts 
from a university webserver (at 1:30 am).

Earlier on this list there was talk of the possible existence of an
unknown exploit in Windows.  Does anyone have any more info about this?  
Something unusual seems to be afoot.

-Alex 

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: