Boyd Williston wrote:

Well, I was assuming that it was a virus or Trojan, on an infected
compture, looking for other victims. Some of the IP address I get in my
scan logs actually resolve to something that I could complain about.
For example, the last one involved some computer on an DSL link from an
ISP in Mexico. So I could send a note to the sysop there saying my
computer was scanned, that's illegal unathorized access, please either
tell this twit to disinfect his computer or shut him off.

Technically, these are not full scans, I guess, just probes on specific
ports. Although I've seen a few things in the logs that were much more
through scans, complete with incrementing IP addresses. But that's rare.

But I was wondering which virus or Trojan (or script) it actually was,
hence my query.

(Just in the time since I wrote the first post, I've been scanned on
ports 135, 139, and 137, from four different IPs.)

"Mark Space" <mark_space44@hotmail.com> wrote in message
news:vfc07shl1juq57@corp.supernews.com...
(Un)Fortunately, your complaint will fall on blind eyes. Understand that
these "probes" happen EVERY second of EVERY day. Network admins have a LOT
more to do than chase down a 13 yr. old who scans someone's PC. And no, it's
not illegal, unauthorized access. They knocked, but no one answered. So it's
pretty unlikely that this twit will get shut down; he's doing nothing wrong.


Think about how many different things can cause a cough. Now, think about
how many different viruses will scan for open ports.

Regards,

Tim

Mark Space <mark_space44@hotmail.com> wrote in
news:vfc07shl1juq57@corp.supernews.com:

Incorrect assumption. The source of the port scan probably isn't infected.
It's usually a deliberate attempt by the computer operator to find another
computer that is.

No way of telling. It's someone looking for a specific opening, but the
script that is looking could be almost anything. It would be simple to
write a script to do this in any of several programming languages.