Re: [Full-Disclosure] Port 5000

2004-05-18 Thread Jonas Frey (Probe Networks)
http://isc.sans.org/diary.php J On Tue, 2004-05-18 at 15:16, Geo. wrote: > Does anyone know what's causing the port 5000 scans yet? > > http://isc.incidents.org/port_details.php?isc=b4827221b7f45feeb0c12bc5040cab > c9&port=5000&repax=1&tarax=2&srcax=2&percent=N&days=10&Redraw=Submit+Query > > G

RE: [Full-Disclosure] Port 5000

2004-05-18 Thread Geo.
>> Does anyone know what's causing the port 5000 scans yet? >This seems to be it: > Port 5000 Traffic Indicates Kibuv.b Worm At Work Nope, it's not Kibuv.b, that uses other ports as well and traffic on those is normal. Probably bobax worm or something new. Geo. _

RE: [Full-Disclosure] Port 5000

2004-05-18 Thread Esler, Joel - Contractor
Bobax and Kibuv worms -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frank Knobbe Sent: Tuesday, May 18, 2004 9:46 AM To: Geo. Cc: [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] Port 5000 On Tue, 2004-05-18 at 08:16, Geo. wrote: > Does anyone k

Re: [Full-Disclosure] Port 5000

2004-05-18 Thread J. Theriault
Geo. wrote: Does anyone know what's causing the port 5000 scans yet? http://isc.incidents.org/port_details.php?isc=b4827221b7f45feeb0c12bc5040cab c9&port=5000&repax=1&tarax=2&srcax=2&percent=N&days=10&Redraw=Submit+Query Geo. ___ Full-Disclosure - We

Re: [Full-Disclosure] Port 5000

2004-05-18 Thread FD Raven
On Tuesday 18 May 2004 09:16, Geo. wrote: > Does anyone know what's causing the port 5000 scans yet? > > http://isc.incidents.org/port_details.php?isc=b4827221b7f45feeb0c12bc5040ca > bc9&port=5000&repax=1&tarax=2&srcax=2&percent=N&days=10&Redraw=Submit+Query According to yesterday's SANS Handler's

Re: [Full-Disclosure] Port 5000

2004-05-18 Thread Frank Knobbe
On Tue, 2004-05-18 at 08:16, Geo. wrote: > Does anyone know what's causing the port 5000 scans yet? > > http://isc.incidents.org/port_details.php?isc=b4827221b7f45feeb0c12bc5040cab > c9&port=5000&repax=1&tarax=2&srcax=2&percent=N&days=10&Redraw=Submit+Query Why yes. http://isc.sans.org/index.php

Re: [Full-Disclosure] Port 5000

2004-05-18 Thread Dave Ockwell-Jenner
Geo. wrote: Does anyone know what's causing the port 5000 scans yet? http://isc.incidents.org/port_details.php?isc=b4827221b7f45feeb0c12bc5040cab c9&port=5000&repax=1&tarax=2&srcax=2&percent=N&days=10&Redraw=Submit+Query Supposedly... http://isc.sans.org/diary.php?date=2004-05-17 -- Dave Ockwell

[Full-Disclosure] Port 5000

2004-05-18 Thread Geo.
Does anyone know what's causing the port 5000 scans yet? http://isc.incidents.org/port_details.php?isc=b4827221b7f45feeb0c12bc5040cab c9&port=5000&repax=1&tarax=2&srcax=2&percent=N&days=10&Redraw=Submit+Query Geo. ___ Full-Disclosure - We believe in it