[Dshield] New probe?

Jon R. Kibler Jon.Kibler at aset.com
Sat Mar 15 19:24:01 GMT 2003


We have noticed what appears to be a new probe pattern. The intruder hits first port 80 (http), then 57 (what exactly is 57?), then 21 (ftp), in that order, and there is about 3 seconds between each probe.

Any idea what this probe is and what it is trying to accomplish?

Thanks!

Jon R. Kibler
A.S.E.T., Inc.
Charleston, SC  USA



More information about the list mailing list