Security Incidents mailing list archives

lots of interest in port 109 (POP2)

From: r.fulton () AUCKLAND AC NZ (Russell Fulton)
Date: Mon, 6 Mar 2000 13:30:37 +1300


Greetings All,
                Over the last couple of days I have seen several scans
of our address space for port 109.  This includes a slow scan the same
as Keith Owens reported on the 25 Feb <5814.951427814 () ocs3 ocs-net>.

Does anyone know why port 109 is suddenly so popular?

Cheers, Russell

Current thread:

lots of interest in port 109 (POP2) Russell Fulton (Mar 05)
- Re: lots of interest in port 109 (POP2) harikiri (Mar 07)
  - Re: lots of interest in port 109 (POP2) Jon Lewis (Mar 08)
- Re: lots of interest in port 109 (POP2) Pavel Kankovsky (Mar 08)
  - Re: lots of interest in port 109 (POP2) Juan M. Courcoul (Mar 08)
    - Re: lots of interest in port 109 (POP2) drkn (Mar 14)
    - Syn and Fin in different packets together Stuart Staniford-Chen (Mar 21)
    - Re: Syn and Fin in different packets together Simple Nomad (Mar 22)
    - Re: Syn and Fin in different packets together Granquist, Lamont (Mar 24)
    - Dramatic increase in UDP Port 137 (NetBIOS Name Service) probe activity Jeffrey D. Carter (Mar 25)
    - Re: Dramatic increase in UDP Port 137 (NetBIOS Name Service) probeactivity Bryan Andersen (Mar 28)

(Thread continues...)