Security Incidents mailing list archives
norton AV host discovery scan
From: "Ian Melven" <imelven () xtremesoft com>
Date: Thu, 6 Dec 2001 11:45:53 -0500
hi everyone i was wondering if anyone else has been seeing scans of 38293/udp recently ? they seem to be coming from the same source.. and repeat 1-3 times per day. snort.org's ports db tells me this is Norton AV host discovery ? i dug around briefly but couldn't find any published holes in this. i suspect someone may be misconfigured. thanks ian ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- norton AV host discovery scan Ian Melven (Dec 06)
- Re: norton AV host discovery scan FatFinger (Dec 09)