RE: malicious scans

2004-05-19 Thread Jens Simmoleit
http://ports.tantalo.net/index.php Try it with 445, you'll see the "normal" programs/services for this port and also listed e.g. (in RED) the Sasser worm. is that what you meant? Greets, Simmel P.S.: Combined with the previous urls you should have some material now I guess :-) -- To UNS

RE: malicious scans

2004-05-18 Thread Matthew Joyce
2004 5:20 AM > To: Debian User List > Subject: Re: malicious scans > > > On Mon, May 17, 2004 at 01:39:39PM +0200, Jens Simmoleit wrote: > > > > > > > > Hi, > > > > > > Anybody know where I can get some detailed info on the

Re: malicious scans

2004-05-18 Thread Ralph Katz
On 05/18/04 15:50, [EMAIL PROTECTED] wrote: Thanks for the response. I realize, though, that I probably wasn't clear enough in my request. I've been to sites like symantec, but they don't have the kind of detail I am looking for. I realize this is off-topic, but I am going to try to clear it up,

Re: malicious scans

2004-05-18 Thread ghcbc
On Mon, May 17, 2004 at 01:39:39PM +0200, Jens Simmoleit wrote: > > > > > Hi, > > > > Anybody know where I can get some detailed info on the > > characteristics of trojans/viruses that scan for vulnerabilities ? > > Specifically, I'm trying to determine if a pattern of scanned ports I have > >

RE: malicious scans

2004-05-17 Thread Jens Simmoleit
> > Hi, > > Anybody know where I can get some detailed info on the > characteristics of trojans/viruses that scan for vulnerabilities ? > Specifically, I'm trying to determine if a pattern of scanned ports I have > noticed on my machine is characteristic of any particular > trojan/virus/mali