Re: Strange back-orifice looking scan...

From: Scott Nursten (scottnat_private)
Date: Wed Sep 11 2002 - 04:50:34 PDT

Next message: Kyle Lai: "Re: Q328691 ?"

Previous message: Arnold Yancha: "Re: UDP flood on port 2001"
In reply to: Neil Dickey: "Re: Strange back-orifice looking scan..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hi, 

http://isc.incidents.org/port_details.html?port=31336 shows nothing....
http://isc.incidents.org/port_details.html?port=1214 shows high sources
around the 27/8 but that's about it...! I would say it some sort of custom
scanner / packet injection tool. Looks fairly innocuous tho' :)


Kind Regards, 

-- 
Scott Nursten
--------------------------
S2S Consultants
T: 01444 232 742
F: 01444 232 061
W: http://s2s.ltd.uk
E: scottnat_private
--------------------------


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Kyle Lai: "Re: Q328691 ?"
Previous message: Arnold Yancha: "Re: UDP flood on port 2001"
In reply to: Neil Dickey: "Re: Strange back-orifice looking scan..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Sep 11 2002 - 15:27:09 PDT