Re: patternmatch for scan

From: Laurent LEVIER (llevierat_private)
Date: Tue Feb 22 2000 - 13:23:46 PST

Next message: arkat_private: "Re: Recent Attacks"

Previous message: K. Graham: "Re: the expensive way to do DDoS ?"
Maybe in reply to: Kenneth_W_Foxat_private: "patternmatch for scan"
Next in thread: Chuck Swiger: "Re: patternmatch for scan"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Both are a single trojan : RingZero :)

At 08:56 19/02/00 -0500, Kenneth_W_Foxat_private wrote:
>Is anyone familiar with an attack or probe which begins or ends with scanning
>only ports 3128 & 8080 on a target box? I've been seeing alot of this lately in
>various places.
>
>Ken

Laurent LEVIER
IT Systems & Networks, Unix System Engineer
Security Specialist

Argosnet Security Server : http://www.Argosnet.com
"Le Veilleur Technologique", "The Technology Watcher"

Next message: arkat_private: "Re: Recent Attacks"
Previous message: K. Graham: "Re: the expensive way to do DDoS ?"
Maybe in reply to: Kenneth_W_Foxat_private: "patternmatch for scan"
Next in thread: Chuck Swiger: "Re: patternmatch for scan"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:07:27 PDT