[Snort-users] Again

Gerson Sampaio rootbit at ...131...
Mon Dec 1 03:50:07 EST 2003


Hi list,
I've been scanned again from this source .
Do you know what this could be ? Can it be a worm ?

======
ICMP PING (Undefined Code!) [**]  {ICMP} x.x.x.x ->
y.y.y.y 
SCAN nmap TCP [**] {TCP} x.x.x.x:80 -> y.y.y.y:53 
MISC source port 53 to <1024 [**] {TCP} x.x.x.x:53 ->
y.y.y.y:53 
=======

TIA
Gerson Sampaio

__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/




More information about the Snort-users mailing list