Re: Port 10008/tcp ?

[H D Moore <hdm () secureaustin com>]

This is someone scanning for the root-shell's left behind by the 1ion worm.

http://www.whitehats.com/library/worms/lion/index.html

On Tuesday 15 May 2001 10:46 am, Tudor Panaitescu wrote:
> Hello everyone !
>
> Does anybody know what is this port, 10008/tcp for ?
>
> I've got some attempts, allways 2 at a time from the same source address.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users