Increased Activity

Lang, Michael mike.lang at
Mon Mar 22 17:44:09 GMT 2004

Hey everyone,

This is my first post to unisog and I just subscribed, - I hope that this isn't repetitive...

This morning I see a dramatic increase in hosts on our network that are scanning for 

tcp 2745
tcp 1025
tcp 3127
tcp 6129
tcp   80

The attacked IP is chosen pretty random with the first octet staying the same and the last three changing.

Not only is there a dramatic increase of hosts on our network getting this, but I see a lot from the Internet pouring into our network.

Anyone clue me into what this one is?


- Mike

University of Connecticut

More information about the unisog mailing list