[Snort-users] Alert question???

Know How beteachable at ...125...
Tue Aug 13 09:05:04 EDT 2002


Hello,
   I was going through snort logs and i see lot of "PRON virgin" alerts. 
Source (NN.NN.NN.NN) is the ip address of a hosted web server at our site. 
Destination is comming from different location as shown below.

#764-(5-7743)        PORN virgin        2002-08-13 10:39:09        
NN.NN.NN.NN:80        66.56.130.252:4920        TCP

We are seeing lot of "PRON Virgin" alerts shown for all ip address (source) 
where we have hosted website. We have couple of website hosted and we are 
getting above alerts for all of them. Is this a attack??? Please let me 
know.

Thanks

_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com





More information about the Snort-users mailing list