[unisog] Increased Activity

Andreas Östling andreaso at it.su.se
Tue Mar 23 08:49:48 GMT 2004


Hello,

Looks like http://www.lurhq.com/phatbot.html (I think Symantec has it under 
the "Polybot" collection now). We have seen a lot of it the last couple of 
days.

/Andreas

On Monday 22 March 2004 18:44, Lang, Michael wrote:

> This morning I see a dramatic increase in hosts on our network that are
> scanning for
>
> tcp 2745
> tcp 1025
> tcp 3127
> tcp 6129
> tcp   80
...
> Anyone clue me into what this one is?



More information about the unisog mailing list