http://vil.nai.com/vil/content/v_100467.htm Could be the cause for 45836 Also, http://isc.sans.org/port_details.html?port=901&;;tarax=1 Seems like there is quite an increase in the amount of scans on that port. http://isc.sans.org/diary.html?date=2003-06-04 Also looks like another worm :/ Stu -----Original Message----- From: Porter, Gary [mailto:Gary.Porterat_private] Sent: 15 July 2003 13:01 To: 'incidentsat_private' Subject: New Probes I saw probes for the first time today on ports 45836 and 901. Anyone have an idea what they are looking for? Gary Porter gary.porterat_private ------------------------------------------------------------------------ ---- Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the world's premier technical IT security event! 10 tracks, 15 training sessions, 1,800 delegates from 30 nations including all of the top experts, from CSO's to "underground" security specialists. See for yourself what the buzz is about! Early-bird registration ends July 3. This event will sell out. www.blackhat.com ------------------------------------------------------------------------ ---- ---------------------------------------------------------------------------- Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the world's premier technical IT security event! 10 tracks, 15 training sessions, 1,800 delegates from 30 nations including all of the top experts, from CSO's to "underground" security specialists. See for yourself what the buzz is about! Early-bird registration ends July 3. This event will sell out. www.blackhat.com ----------------------------------------------------------------------------
This archive was generated by hypermail 2b30 : Tue Jul 15 2003 - 22:17:56 PDT