On Tuesday 18 May 2004 09:16, Geo. wrote: > Does anyone know what's causing the port 5000 scans yet? > > http://isc.incidents.org/port_details.php?isc=b4827221b7f45feeb0c12bc5040ca > bc9&port=5000&repax=1&tarax=2&srcax=2&percent=N&days=10&Redraw=Submit+Query
According to yesterday's SANS Handler's Diary, it's two new worms - Bobax and Kibuv: http://isc.sans.org/diary.php?date=2004-05-17 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
