[TriLUG] are these port scanners?

[Joseph Mack NA3T]

On Sun, 13 May 2012, Matt Flyer wrote:

> It looks to me like, yes, they are port scanners. 
> Probably pat of a bot-net on someone's exploited server.

looks like a machine on dialup. Maybe a compromised box in 
someone's home. If the ISPs sent people notices about this, 
the internet would be a lot cleaner. It would be like the 
doctor asking an overweight person who has come in for 
something else, if they'd like any help loosing weight.

> but I can't see much benefit to this type of scan.

Me neither. There's people banging away on port 445 etc. I 
can see some point in this.

Joe

-- 
Joseph Mack NA3T EME(B,D), FM05lw North Carolina
jmack (at) wm7d (dot) net - azimuthal equidistant map
generator at http://www.wm7d.net/azproj.shtml
Homepage http://www.austintek.com/ It's GNU/Linux!