[Snort-users] Alert question???
beteachable at ...125...
Tue Aug 13 09:05:04 EDT 2002
I was going through snort logs and i see lot of "PRON virgin" alerts.
Source (NN.NN.NN.NN) is the ip address of a hosted web server at our site.
Destination is comming from different location as shown below.
#764-(5-7743) PORN virgin 2002-08-13 10:39:09
NN.NN.NN.NN:80 220.127.116.11:4920 TCP
We are seeing lot of "PRON Virgin" alerts shown for all ip address (source)
where we have hosted website. We have couple of website hosted and we are
getting above alerts for all of them. Is this a attack??? Please let me
Send and receive Hotmail on your mobile device: http://mobile.msn.com
More information about the Snort-users