[unisog] Scan of port 901/tcp

Ken Connelly Ken.Connelly at uni.edu
Mon Mar 10 15:40:45 GMT 2003


Only two packets seen here in the past week:

Mar  6 16:25:18 216.185.232.235:2405 -> xxx.yyy.1.14:901 SYN ******S* 
Mar  6 16:26:45 216.185.232.235:4183 -> xxx.yyy.220.2:901 SYN ******S* 

but these were parts of scans of those two IPs rather than anything 
looking for 901 in particular, so I guess that makes the answer from 
here "no".

- ken

Anderson Johnston wrote:

>I don't remember seeing this port scanned before.  It's used by SWAT
>(Samba Web Administration Tool).  Has any one else seen these scans?
>
>				- Andy Johnston
>
>
>Log Excerpt:
>
>Mar  8 07:37:43 216.47.156.180:3161 -> MY.NET.229.166:901 SYN ******S*
>Mar  8 07:37:43 216.47.156.180:3146 -> MY.NET.229.163:901 SYN ******S*
>Mar  8 07:37:43 216.47.156.180:3166 -> MY.NET.229.167:901 SYN ******S*
>Mar  8 07:37:43 216.47.156.180:3131 -> MY.NET.229.160:901 SYN ******S*
>Mar  8 07:37:44 216.47.156.180:3657 -> MY.NET.229.214:901 SYN ******S*
>Mar  8 07:37:44 216.47.156.180:3662 -> MY.NET.229.215:901 SYN ******S*
>Mar  8 07:37:44 216.47.156.180:3682 -> MY.NET.229.219:901 SYN ******S*
>Mar  8 07:37:44 216.47.156.180:3692 -> MY.NET.229.221:901 SYN ******S*
>Mar  8 07:37:44 216.47.156.180:3732 -> MY.NET.229.229:901 SYN ******S*
>Mar  8 07:37:44 216.47.156.180:3767 -> MY.NET.229.236:901 SYN ******S*
>Mar  8 07:37:44 216.47.156.180:3772 -> MY.NET.229.237:901 SYN ******S*
>
>
>------------------------------------------------------------------------------
>** Andy Johnston (andy at umbc.edu)          *            pager: 410-678-8949  **
>** Manager of IT Security                 * PGP key:(afj2000) 1024/F67035E1 **
>** Office of Information Technology, UMBC *        5D 44 1E 2E A6 7C 91 7A  **
>** 410-455-2583 (v)/410-455-1065 (f)      *        C4 66 5F D5 BA B9 F6 58  **
>------------------------------------------------------------------------------
>
>  
>

-- 
- Ken
===========================================================================
Ken Connelly (KC152) Systems and Operations Manager, ITS - Network Services
University of Northern Iowa                     Cedar Falls, IA  50614-0121
email: Ken.Connelly at uni.edu    phone: (319) 273-5850    fax: (319) 273-7373






More information about the unisog mailing list