[NCLUG] poking port 109

[mike cullerton]

on 12/3/01 10:17 AM, Michael Dwyer at mdwyer at sixthdimension.com wrote:

> vulnerable in RH5, I guess.  However, you aren't the only person to
> notice it.  While not high on the lists at DShield, it is still rather
> significant:
> 
> http://www1.dshield.org/port_report.php?port=109
> 
> Incidently, if you submit your logs to DShield, then DSHield will send a
> contact note up the chain and will also make note of their intrusion.
> That might help.  It is certainly easier than chasing it down yourself.

thanks for the info. i'll send them my logs.

after reaching .127, the scan seems to have stopped. lasted from 5am on the
1st thru 2:30am on the 3rd.

have a day all,
mike

 -- mike cullerton   michaelc at cullerton dot com