Re: Scanning on UDP 1027

[Wyman Miles <wm63 () CORNELL EDU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

We saw some big spikes on the 16th for 1027/udp, but nothing yesterday or
today.

Squid scanning is up over the past 48 hours, but otherwise it's the same
background noise of Windows ports and recent backup software issues that
we've had for a week or so.

Geographic breakdown shows high volume from Asia, which is expected  given
that they're about 1/2 the population and have decent access to technology.


Wy


- --On Monday, April 18, 2005 11:21 AM -0500 Ron Parker
<rparker () BRAZOSPORT EDU> wrote:

> Looking at SANS data, doesn't look like anything unusual today:
>
> http://isc.sans.org/port_details.php?port=1027&repax=1&tarax=2&srcax=2&pe
> rcent=N&days=70&Redraw=
>
> --
> Ron Parker, Director of Information Technology, Brazosport College
> Voice: (979) 230-3480             FAX: (979) 230-3111
> http://www.brazosport.edu
>
>
> On Mon, 18 Apr 2005, Jason Richardson wrote:
>
> > Has anyone else seen lots of scanning activity from remote nets,
> > especially from China?
> >
> > Thanks,
> >
> > ---
> > Jason Richardson
> > Manager, IT Security and Client Development
> > Enterprise Systems Support
> > Northern Illinois University
> > Voice: 815-753-1678
> > Fax: 815-753-2555
> > jasrich () niu edu
> >
> > **********
> > Participation and subscription information for this EDUCAUSE Discussion
> > Group discussion list can be found at http://www.educause.edu/groups/.
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion
> Group discussion list can be found at http://www.educause.edu/groups/.



Wyman Miles
Senior Security Engineer
Cornell University, Ithaca, NY
(607) 255-8421
-----BEGIN PGP SIGNATURE-----
Version: Mulberry PGP Plugin v3.0
Comment: processed by Mulberry PGP Plugin

iQA/AwUBQmPioMRE6QfTb3V0EQIm9gCePjoSSAaao9bwnWNvbhL6pZ9s1GAAoJSR
CZ+vPFYxy9wz6ckiz7JH6y5P
=v+Vb
-----END PGP SIGNATURE-----

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.