RE: New Probes

From: Declan Ingram (Dingramat_private)
Date: Tue Jul 15 2003 - 11:44:03 PDT

  • Next message: Roberto Cardona: "Re: qmail smtp-auth bug allows open relay"

    Hi all,
    
    901 is SWAT and/or RealSecure sensor
    45836 is W32/Graps.worm (http://vil.nai.com/vil/content/v_100467.htm)
    
    /dec
    
    -----Original Message-----
    From: Porter, Gary [mailto:Gary.Porterat_private] 
    Sent: Tuesday, July 15, 2003 10:01 PM
    To: 'incidentsat_private'
    Subject: New Probes
    
    I saw probes for the first time today on ports 45836 and 901.  Anyone
    have
    an idea what they are looking for?
    
    Gary Porter
    gary.porterat_private
    
    ------------------------------------------------------------------------
    ----
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas,
    the 
    world's premier technical IT security event! 10 tracks, 15 training
    sessions, 
    1,800 delegates from 30 nations including all of the top experts, from
    CSO's to 
    "underground" security specialists.  See for yourself what the buzz is
    about!  
    Early-bird registration ends July 3.  This event will sell out.
    www.blackhat.com
    ------------------------------------------------------------------------
    ----
    
    
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's to 
    "underground" security specialists.  See for yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Tue Jul 15 2003 - 22:24:21 PDT