Re: TCP port 5000 syn increasing

[Valdis.Kletnieks () vt edu]

On Fri, 21 May 2004 13:27:22 +0200, Meidinger Chris <chris.meidinger () badenit de>  said:

> but a bot that 'quietly' - meaning somehow less than randomly - infects
> boxes in corporate networks, and then goes out over port 80 with legitimate
> looking http traffic would be pretty evil. more likely, however, to be of
> use to advanced blackhats that to sKiddie's and their ilk.

Eventually, it all falls in to skript kiddie hands sooner or later.  The major
difference is that you usually are able to notice that the ankle-biters are
busy trying to pull their teeth out of your hiking boots....

Attachment: _bin
Description: