Port 10008

From: Joerg Weber (Joerg.Weber@jet-online.de)
Date: Tue May 15 2001 - 02:10:07 PDT

  • Next message: Vitaly Osipov: "Re: recent sadmin worm" 

    Hello everyone,

my FW-Logs went insane last night with gazillions of connection attempts to
port 10008.
FW-1 does unfortunately not log dropped packets, so I've no idea about flags
et al, but the scan looks like this:
SourcePort = Increases with each scan
DestPort   = 10008

This looks like an automated tool to me, as the whole scan took about a
second or two.
Any ideas?

Thanks,

Joerg

    This archive was generated by hypermail 2b30 : Tue May 15 2001 - 08:42:23 PDT