[Dshield] Increased activity

John D. lists at webcrunchers.com
Sun Aug 17 21:04:29 GMT 2003


>Hullo - I'm seeing somewhat increased activity here (cox.net, in RI) 
>starting last night, and to a lesser extent on Comcast systems in Kittery 
>ME and Seattle WA.  There are three patterns -- one is scanning from within 
>the local class-B space, but not to port 135, rather a number of ports in 
>the 1000-2000 range.  Here at least these seem to come from remote port 
>1025.  Second is bursts of scans from port 80 to ports in the 1145-1150 
>range, from IPs that Smartwhois says belong to Akamai.

You mentioned "Smartwhois",  what is that?   And how does it differ from
a regular UNIX type "whois"?  Will it run on Mac OS-9?

John






More information about the list mailing list