Re: patternmatch for scan

[Cliff Rayman <cliff () genwax com>]

looking for squid sploits.

check out:
http://www.robertgraham.com/pubs/firewall-seen.html

cliff rayman
genwax.com

Kenneth_W_Fox () sbphrd com wrote:

> Is anyone familiar with an attack or probe which begins or ends with scanning
> only ports 3128 & 8080 on a target box? I've been seeing alot of this lately in
> various places.
>
> Ken