Re: Port Scanning on 1026 & 1027

"Dan Parmelee" <[email protected]> Wed, 27 Jul 2005 10:07:18 -0500
Newsgroups gmane.comp.security.intrusions
Message-ID <[email protected]>
1026/1027 are generally used for Messenger spamming. I always run a small
program on every machine called MessengerDisable that flat out removes
Messenger (since disabling the service doesn't do enough).

Hope this helps.


Regards,

Dan Parmelee 

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Tony Tomasello
Sent: Tuesday, July 26, 2005 2:15 PM
To: [email protected]
Subject: [Intrusions] Port Scanning on 1026 & 1027

Guys,

I have noticed a tremendous amount of scanning on ports 1026 and 1027. Not
sure if you all have been experiencing the same. Is this something that I
should be concerned about ?

Thanks,
Tony T.


_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions

_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions