On Tue, 4 Jan 2000, Thomas Molina wrote:
> The interesting thing to me is the change in pattern I've seen. Port
> scans for port 1080 at my location are quite common. I've got logs back
> 90 days; Through the end of December I only see one scan for port
> 119. I've seen three separate incidents since the 1st of January.
I recently had a number of scans on port 119, it turned out to be a
customer's newsreader being pointed at the wrong host (www. instead
of news.). Not sure what newsreader he was using though - just that
he was running NT at the time.
Vince.
--
==========================================================================
Vince Vielhaber -- KA8CSH email: vev@michvhf.com http://www.pop4.net
128K ISDN: $24.95/mo or less - 56K Dialup: $17.95/mo or less at Pop4
Online Campground Directory http://www.camping-usa.com
Online Giftshop Superstore http://www.cloudninegifts.com
==========================================================================
Received on Jan 06 2000