>> Does anyone know what's causing the port 5000 scans yet? >This seems to be it: > Port 5000 Traffic Indicates Kibuv.b Worm At Work
Nope, it's not Kibuv.b, that uses other ports as well and traffic on those is normal. Probably bobax worm or something new. Geo. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
