Security Incidents: Re: lots of interest in port 109 (POP2)

[harikiri () EL8 ORG (harikiri)]

I can't comment on why POP-2 has become so popular all of a sudden, but I
can also confirm that a client of mine has seen a sweep of its class C for
the service - at two different times, from two unique ip's.

-h

--
"Unless you enter the tiger's lair, you cannot get hold of the tiger's cubs."

On Mon, 6 Mar 2000, Russell Fulton wrote:

> Greetings All,
>               Over the last couple of days I have seen several scans
> of our address space for port 109.  This includes a slow scan the same
> as Keith Owens reported on the 25 Feb <5814.951427814 () ocs3 ocs-net>.
>
> Does anyone know why port 109 is suddenly so popular?
>
> Cheers, Russell