[Dshield] Increased activity
lists at webcrunchers.com
Sun Aug 17 21:04:29 GMT 2003
>Hullo - I'm seeing somewhat increased activity here (cox.net, in RI)
>starting last night, and to a lesser extent on Comcast systems in Kittery
>ME and Seattle WA. There are three patterns -- one is scanning from within
>the local class-B space, but not to port 135, rather a number of ports in
>the 1000-2000 range. Here at least these seem to come from remote port
>1025. Second is bursts of scans from port 80 to ports in the 1145-1150
>range, from IPs that Smartwhois says belong to Akamai.
You mentioned "Smartwhois", what is that? And how does it differ from
a regular UNIX type "whois"? Will it run on Mac OS-9?
More information about the list