[Intrusions] Port Scanning on 1026 & 1027

Tony Tomasello a_tomasello at hotmail.com
Wed Jul 27 15:33:08 GMT 2005


Thats great..


  Thank you very much for that info. I will do the same on my network 
machines.

Thanks,
  Tony T.

>From: "Dan Parmelee" <dan.parmelee at gmail.com>
>Reply-To: "Intrusions List (GCIA Practicals)" <intrusions at lists.sans.org>
>To: "'Intrusions List (GCIA Practicals)'" <intrusions at lists.sans.org>
>Subject: Re: [Intrusions] Port Scanning on 1026 & 1027
>Date: Wed, 27 Jul 2005 10:07:18 -0500
>
>1026/1027 are generally used for Messenger spamming. I always run a small
>program on every machine called MessengerDisable that flat out removes
>Messenger (since disabling the service doesn't do enough).
>
>Hope this helps.
>
>
>Regards,
>
>Dan Parmelee
>
>-----Original Message-----
>From: intrusions-bounces at lists.sans.org
>[mailto:intrusions-bounces at lists.sans.org] On Behalf Of Tony Tomasello
>Sent: Tuesday, July 26, 2005 2:15 PM
>To: intrusions at lists.sans.org
>Subject: [Intrusions] Port Scanning on 1026 & 1027
>
>Guys,
>
>I have noticed a tremendous amount of scanning on ports 1026 and 1027. Not
>sure if you all have been experiencing the same. Is this something that I
>should be concerned about ?
>
>Thanks,
>Tony T.
>
>
>_______________________________________________
>Intrusions mailing list
>Intrusions at lists.sans.org
>http://www.dshield.org/mailman/listinfo/intrusions
>
>_______________________________________________
>Intrusions mailing list
>Intrusions at lists.sans.org
>http://www.dshield.org/mailman/listinfo/intrusions





More information about the Intrusions mailing list