On Tue, 03 Jul 2001, Luke Butcher spewed into the ether:
>
> We see scans of many weird port in the 40000-50000 range. These usually are
> looking for the TornKit root kit. It sets up a backdoor on this port. It's
> possible that is what is being searched for.
Or maybe just a traceroute to odd high ports instead of the 33K+
normally seen
Devdas Bhagat
--
No committee could ever come up with anything as revolutionary as a camel --
anything as practical and as perfectly designed to perform effectively under
such difficult conditions.
-- Laurence J. Peter
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
