[UMBC NIDS] Wide Scan Summary (fwd)

Anderson Johnston andy at umbc.edu
Mon Mar 25 23:11:03 GMT 2002


Any idea why someone would scan port 60001?


===================================================================================
                            Scanners by Number of Target IP Addresses
			    -----------------------------------------
Scanner IP		# Targets 		Ports 			Type
-------------------	--------------		-----------		-----------
62.204.197.138 		275     		60001      		SYN

-----------------------------------------------------------------------------------
Log Excerpts:
Mar 24 21:04:29 62.204.197.138:1651 -> MY.NET.5.79:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1655 -> MY.NET.5.83:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1657 -> MY.NET.5.85:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1659 -> MY.NET.5.87:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1662 -> MY.NET.5.90:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1664 -> MY.NET.5.92:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1667 -> MY.NET.5.95:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1668 -> MY.NET.5.96:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1669 -> MY.NET.5.97:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1671 -> MY.NET.5.99:60001 SYN ******S*
Mar 24 21:04:29 62.204.197.138:1672 -> MY.NET.5.100:60001 SYN ******S*

-----------------------------------------------------------------------------------
Domain Registration:
% This is the RIPE Whois server.
% The objects are in RPSL format.
% Please visit http://www.ripe.net/rpsl for more information.
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum:      62.204.192.0 - 62.204.217.255
netname:      REDUNED
descr:        Universidad Nacional de Educacion a Distancia
descr:        Madrid
country:      ES
admin-c:      ARG3-RIPE
tech-c:       ARG3-RIPE
tech-c:       FGR4-RIPE
status:       ASSIGNED PA
notify:       hostmaster at csi.uned.es
mnt-by:       UNED-NOC
changed:      hostmaster at ripe.net 20000630
changed:      hostmaster at csi.uned.es 20000711
source:       RIPE

route:        62.204.192.0/19
descr:        RedUNED
origin:       AS15630
notify:       hostmaster at csi.uned.es
mnt-by:       UNED-NOC
changed:      hostmaster at csi.uned.es 20000922
source:       RIPE

person:       Antonio Ruiperez Garcia
address:      Universidad Nacional de Educacion a Distancia
address:      Centro de Sistemas Informaticos
address:      Bravo Murillo, 38
address:      E-28015 Madrid
address:      SPAIN
phone:        +34 913987444
fax-no:       +34 913987588
e-mail:       aruip at csi.uned.es
nic-hdl:      ARG3-RIPE
notify:       hostmaster at csi.uned.es
mnt-by:       UNED-NOC
changed:      juancarlos.moreno at rediris.es 19961213
changed:      iris-nic at rediris.es 19980612
                            Scanners by Number of Target IP Addresses
changed:      iris-nic at rediris.es 19981031
changed:      iris-nic at rediris.es 20000711
changed:      aruip at csi.uned.es 20000711
source:       RIPE

person:       Fernando Gozalo Rodrigo
address:      Universidad Nacional de Educacion a Distancia
address:      Centro de Sistemas Informaticos
address:      Bravo Murillo, 38
address:      E-28015 Madrid
address:      SPAIN
phone:        +34 913987599
fax-no:       +34 913987588
e-mail:       fgozalo at csi.uned.es
nic-hdl:      FGR4-RIPE
notify:       hostmaster at csi.uned.es
mnt-by:       UNED-NOC
changed:      iris-nic at rediris.es 19990323
changed:      iris-nic at rediris.es 20000711
changed:      hostmaster at csi.uned.es 20000711
source:       RIPE




More information about the unisog mailing list