--- Eric <swive@getnet.com> wrote:
> Someone is playing around with my front door at this
> very moment.  TCP port 3571 (HTTP) with flag "AF". 
> What is that flag?  I don't see it on google.
> 

I found this link. If the main google search doesn't
work click the groups tab :).

http://groups.google.com/groups?q=af+flag&start=20&hl=en&selm=9fnqnm%2411tu%241%40gavrilo.mtu.ru&rnum=25

Looks like it's an IIS exploit.

__________________________________________________
Do You Yahoo!?
Yahoo! Tax Center - online filing with TurboTax
http://taxes.yahoo.com/