Security Incidents mailing list archives

more info on ramen.tgz


From: "Jeffrey F. Lawhorn" <jeffl () wanet net>
Date: Wed, 17 Jan 2001 11:35:13 -0800

One more thing I've noticed about the synscan in the ramen.tgz, it sends a TCP
packet to 212.184.80.190 port 80 from port 31337 after it finishes scanning
each /16.

Unfortunately I was unable to capture any of the actual packets.  Did anyone
else manage to capture one of these packets?

jeffl


--
Jeffrey F. Lawhorn                       |Internet Security Consulting
Software Design Associates, Inc.         |IDS Monitoring/Reporting
jeffl () wanet net       619-679-5900 voice |Expunge Intruders
http://www.wanet.net/ 619-679-2327 fax   |
Finger jeffl () wanet net for PGP Public Key.

Insist on Quality! WANet.Net is an ISP/C Member - http://www.ispc.org/


Attachment: _bin
Description:


Current thread: