>>That makes sense. But isn't 1025 also for DCOM? I thought maybe that's
what >>they were looking for?
"a DCOM RPC interface that listens on TCP/UDP port 135. "
"TCP Port 1025
Common Use
Microsoft Remote Procedure Call (RPC) service."
"common use" is Windows-only, not TCP "well-known/registered use" which is:
# REGISTERED PORT NUMBERS
#
blackjack 1025/tcp #network blackjack
blackjack 1025/udp #network blackjack
"best practice" would have all Windows RPC services turned off on
machines facing internet, and if the scan traffic is bothersome,
block it at the edge firewall.
obviously, these scans are going after WINDOWS RPC listners.
Len
_____________________________________________________________________
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
