[Snort-users] Alert question???

Know How beteachable at ...125...
Tue Aug 13 09:05:04 EDT 2002

   I was going through snort logs and i see lot of "PRON virgin" alerts. 
Source (NN.NN.NN.NN) is the ip address of a hosted web server at our site. 
Destination is comming from different location as shown below.

#764-(5-7743)        PORN virgin        2002-08-13 10:39:09        
NN.NN.NN.NN:80        TCP

We are seeing lot of "PRON Virgin" alerts shown for all ip address (source) 
where we have hosted website. We have couple of website hosted and we are 
getting above alerts for all of them. Is this a attack??? Please let me 


Send and receive Hotmail on your mobile device: http://mobile.msn.com

More information about the Snort-users mailing list