Re: Strange back-orifice looking scan...

[Scott Nursten <scottn () s2s ltd uk>]

Hi, 

http://isc.incidents.org/port_details.html?port=31336 shows nothing....
http://isc.incidents.org/port_details.html?port=1214 shows high sources
around the 27/8 but that's about it...! I would say it some sort of custom
scanner / packet injection tool. Looks fairly innocuous tho' :)


Kind Regards, 

-- 
Scott Nursten
--------------------------
S2S Consultants
T: 01444 232 742
F: 01444 232 061
W: http://s2s.ltd.uk
E: scottn () s2s ltd uk
--------------------------


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com