Today I am detecting a lot of port scanning activities.
Did anyone notice the newest port scanning from IP 193.92.103.96?
OrgName: IBM Netherlands N.V. ([email protected]).
LeetProdigy is right. Usually every one thats connected to the internet gets a los of scans and get probe by people that are Scanning networks for vulnerabilitys, and some virus also prodice this effect like blaster that searches for computers to infect.
It could be some n00B doomaaas who got a hold of nmap and didn't quite figure out how to use it before s/he started scanning whole networks.... Then again, it could be someone who just doesn't know how to gather target data quietly which is also very likely...
Point is you'll get an ulsar if you freak everytime someone port scans you, it happes to my company dozens of times per day. Do yourself a favor and learn how to tell a port scan (which every 1337 h4x0R k1dd3 thinks is hacking) and a real attack apart. Your stomach lining will thank you for it.
Reply With Quote
