[Snort-users] RE: [Snort-sigs] Scan on tcp 13000

From: <Scheidell(at)secnap.com>
Date: Tue Feb 18 2003 - 04:36:19 EST

> -----Original Message-----
> From: Jeff Kell [mailto:jeff-kell@utc.edu]
> Sent: Tuesday, February 18, 2003 1:57 AM
> To: Michael Scheidell
> Cc: Bob Dehnhardt; 'Snort Users List'; baldwinl@mynetwatchman.com
> Subject: Re: [Snort-sigs] Scan on tcp 13000
> >
> > Yep, coming out of columbia.edu.
>
> I had 1702 hits in one tarpit, let me see if they're still stuck...

Yep, same source as I saw.

they must have some trojan on.

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list Received on Tue Feb 18 10:53:21 2003