Search a Spamfilter or Module

These are old archives. They are kept for historic purposes only.
Post Reply
X-Trancer
Posts: 34
Joined: Mon Mar 08, 2004 5:24 am

Search a Spamfilter or Module

Post by X-Trancer » Mon Oct 31, 2005 12:01 am

[00:28:07] <Donna_Pierce40> Found port 6129 open at ip:69.194.58.254
[00:28:11] <mgihj> Found port 6129 open at ip:69.144.140.127

Gives for this Scannerbots a Module or Spamfilter?

Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth » Mon Oct 31, 2005 6:22 am

Code: Select all

^Found port \d{4} open at ip:(\d{1,3}\.){3}\d{1,3}$
I am sure that regex can be improved, but it will work anyway :)

X-Trancer
Posts: 34
Joined: Mon Mar 08, 2004 5:24 am

Post by X-Trancer » Mon Oct 31, 2005 7:19 am

thx

aquanight
Official supporter
Posts: 862
Joined: Tue Mar 09, 2004 10:47 pm
Location: Boise, ID

Post by aquanight » Mon Oct 31, 2005 5:52 pm

Stealth wrote:

Code: Select all

^Found port \d{4} open at ip:(\d{1,3}\.){3}\d{1,3}$
I am sure that regex can be improved, but it will work anyway :)
Yup

Code: Select all

^Found port \d+ open at ip:(\d{1,3}\.){3}\d{1,3}$

Stealth
Head of Support
Posts: 2086
Joined: Tue Jun 15, 2004 8:50 pm
Location: Chino Hills, CA, US
Contact:

Post by Stealth » Mon Oct 31, 2005 8:13 pm

Code: Select all

^Found port \d+{1,5} open at ip:(\d{1,3}\.){3}\d{1,3}$
I thought about making it {4,5}, but then that restricts it to only non-system ports...

Post Reply