Snort mailing list archives

Alert question???


From: "Know How" <beteachable () hotmail com>
Date: Tue, 13 Aug 2002 12:04:34 -0400

Hello,
I was going through snort logs and i see lot of "PRON virgin" alerts. Source (NN.NN.NN.NN) is the ip address of a hosted web server at our site. Destination is comming from different location as shown below.

#764-(5-7743) PORN virgin 2002-08-13 10:39:09 NN.NN.NN.NN:80 66.56.130.252:4920 TCP

We are seeing lot of "PRON Virgin" alerts shown for all ip address (source) where we have hosted website. We have couple of website hosted and we are getting above alerts for all of them. Is this a attack??? Please let me know.

Thanks

_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com



-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code=31
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: