[Snort-users] Port 10008/tcp ?

H D Moore hdm at ...1714...
Tue May 15 12:07:08 EDT 2001


This is someone scanning for the root-shell's left behind by the 1ion worm.

http://www.whitehats.com/library/worms/lion/index.html

On Tuesday 15 May 2001 10:46 am, Tudor Panaitescu wrote:
> Hello everyone !
>
> Does anybody know what is this port, 10008/tcp for ?
>
> I've got some attempts, allways 2 at a time from the same source address.




More information about the Snort-users mailing list