Re: Port Scanning on 1026 & 1027

"Tony Tomasello" <[email protected]> Wed, 27 Jul 2005 11:33:08 -0400
Newsgroups gmane.comp.security.intrusions
Message-ID <[email protected]>
Thats great..


  Thank you very much for that info. I will do the same on my network 
machines.

Thanks,
  Tony T.

>From: "Dan Parmelee" <[email protected]>
>Reply-To: "Intrusions List (GCIA Practicals)" <[email protected]>
>To: "'Intrusions List (GCIA Practicals)'" <[email protected]>
>Subject: Re: [Intrusions] Port Scanning on 1026 & 1027
>Date: Wed, 27 Jul 2005 10:07:18 -0500
>
>1026/1027 are generally used for Messenger spamming. I always run a small
>program on every machine called MessengerDisable that flat out removes
>Messenger (since disabling the service doesn't do enough).
>
>Hope this helps.
>
>
>Regards,
>
>Dan Parmelee
>
>-----Original Message-----
>From: [email protected]
>[mailto:[email protected]] On Behalf Of Tony Tomasello
>Sent: Tuesday, July 26, 2005 2:15 PM
>To: [email protected]
>Subject: [Intrusions] Port Scanning on 1026 & 1027
>
>Guys,
>
>I have noticed a tremendous amount of scanning on ports 1026 and 1027. Not
>sure if you all have been experiencing the same. Is this something that I
>should be concerned about ?
>
>Thanks,
>Tony T.
>
>
>_______________________________________________
>Intrusions mailing list
>[email protected]
>http://www.dshield.org/mailman/listinfo/intrusions
>
>_______________________________________________
>Intrusions mailing list
>[email protected]
>http://www.dshield.org/mailman/listinfo/intrusions


_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions