Page 1 of 1

Search a Spamfilter or Module

Posted: Mon Oct 31, 2005 12:01 am
by X-Trancer
[00:28:07] <Donna_Pierce40> Found port 6129 open at ip:69.194.58.254
[00:28:11] <mgihj> Found port 6129 open at ip:69.144.140.127

Gives for this Scannerbots a Module or Spamfilter?

Posted: Mon Oct 31, 2005 6:22 am
by Stealth

Code: Select all

^Found port \d{4} open at ip:(\d{1,3}\.){3}\d{1,3}$
I am sure that regex can be improved, but it will work anyway :)

Posted: Mon Oct 31, 2005 7:19 am
by X-Trancer
thx

Posted: Mon Oct 31, 2005 5:52 pm
by aquanight
Stealth wrote:

Code: Select all

^Found port \d{4} open at ip:(\d{1,3}\.){3}\d{1,3}$
I am sure that regex can be improved, but it will work anyway :)
Yup

Code: Select all

^Found port \d+ open at ip:(\d{1,3}\.){3}\d{1,3}$

Posted: Mon Oct 31, 2005 8:13 pm
by Stealth

Code: Select all

^Found port \d+{1,5} open at ip:(\d{1,3}\.){3}\d{1,3}$
I thought about making it {4,5}, but then that restricts it to only non-system ports...