its actually part of the lion worm that recently was discovered in the
wild......check it out at http://www.whitehats.com/library/worms/lion/
just do a search on 10008 and you will see exactly what to look at/for
----- Original Message -----
From: "Skip Lawrence - ext. 8972" <[EMAIL PROTECTED]>
To: "'Robert C. Wessel'" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Monday, May 14, 2001 1:42 PM
Subject: RE: [FW1] Port 10008?
>
> I have checked my ports and I do not see anything different . You may have
> been scanned to see if they can get in .
>
> -----Original Message-----
> From: Robert C. Wessel [mailto:[EMAIL PROTECTED]]
> Sent: Monday, May 14, 2001 2:25 AM
> To: [EMAIL PROTECTED]
> Subject: [FW1] Port 10008?
>
>
>
> Is there some new (or old) trojan/worm/exploit/whatever running around
that
> tries to install a service on port 10008? I've had my network scanned
> nearly a dozen times this weekend on that port.
>
>
>
============================================================================
> ====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
>
>
>
============================================================================
====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================