Re: Port Scanning on 1026 & 1027

I'm seeing a fair amount of consistent scans to those ports, beginning around 2:00 CST on the 26th, but wouldn't say tremendous. From here they were coming in at 15 min. intervals or more, and are tapering off this morning. Majority are from 222.141.102.13. Quick check shows that as CNCGROUP Henan province network, China Network Communications Group Corporation, Beijing, CN. I don't have any packets captured, etc.. Hope this helps.

Hal Marshall
IT Manager
Greenwood & Associates

-----Original Message-----
From: [email protected]
[mailto:[email protected]]On Behalf Of Tony Tomasello
Sent: Tuesday, July 26, 2005 2:15 PM
To: [email protected]
Subject: [Intrusions] Port Scanning on 1026 & 1027


Guys,

I have noticed a tremendous amount of scanning on ports 1026 and 1027. Not 
sure if you all have been experiencing the same. Is this something that I 
should be concerned about ?

Thanks,
Tony T.


_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions

_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions