bestrcpilot

I keep getting Port Scan attacks from image2.rcuniverese.com from someome in NJ.
IS this from RDCniverse or is it someome spoofing?

Thanks
Scott Yeo

mvigod

image2.rcuniverse.com is our server in texas so it must be a spoof of some kind...why do you say it is in NJ?

we don't scan ports...what ports are they hitting?

bestrcpilot

Thank Marc for the answer, I did not think it was from rcuniverse
as the spelling is not the same but close. The spoof has a extra E in it.

My Firewall has pick up the portscans and the only info I could get was the the host was in NJ somewhere after about ten hops it tried to open a port on my network. The next time it happens I will try and get more info. I did try and back track the route and and the host came up as unknown.

Scott Yeo

mvigod

I get port scans all the time...sometimes false alarms or sometimes bots just looking for open ports to test for weaknesses.