NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Strange Service



Benjamin,

I had the same scan occur on March 12 at 0449h EST from 200.21.200.239. It
is most likely a search for the "rootkit t0rn". See
http://www.sans.org/y2k/.htm for a report on the SANS site. 


Ken [email protected]



> -----Original Message-----
> From: Benjamin Keller [mailto:[email protected]]
> Sent: Tuesday, March 13, 2001 11:05
> To: [email protected]
> Subject: [FW1] Strange Service
> 
> 
> 
> Hi All,
> 
> Quick Question,
> 
> I see in my logs that service 511 (looks like an attack) was 
> block, it seams
> to be some kind of scan. I have tried to find what it is and 
> I am unable to
> make heads or tales.
> 
> Thanks in advance for the heads up,
> 
> Benjamin Keller
> Systems Administrator
> Conceptis Technologies
> 
> 
> 
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the 
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
> 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.