[Dshield] Portscan pattern

Blake McNeill mcneillb at linklogger.com
Sun Mar 14 11:03:20 GMT 2004


Likely Nachi.F.  See http://www.linklogger.com/Port1025_RPC_Exploit.htm for
some 1025 captures and scanning patterns.

Blake


----- Original Message ----- 
From: "Korhonen Juuso" <juuso.korhonen at camline.fi>
To: <list at dshield.org>
Sent: Saturday, March 13, 2004 12:01 PM
Subject: [Dshield] Portscan pattern


> Hi
>
> Can somebody tell me is it a scanning tool or a computer with virus with a
> scan pattern like this:
>
> Scanned ports: 2745, 1025, 135, 445, 6129
>
> I am having scans like this originating mainly from addresses starting
with
> 61. and 68.
>
> Best Regards
>
> Juuso Korhonen
> IT Manager
> Camline corporation
>
>
>
>
****************************************************************************
> This message has been scanned by F-Secure Anti-Virus for Microsoft
Exchange.
>
****************************************************************************
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list




More information about the list mailing list