Security Incidents mailing list archives
Re: !! Strange ports for attack
From: Ben Laws <ben () ION AS UTEXAS EDU>
Date: Tue, 15 Aug 2000 10:06:17 -0500
Howdy Pavel, These are all commonly used ports for various trojans. They're scanning your systems for trojans active on these ports.
From http://www.simovits.com/nyheter9902.html :
port 1243 - BackDoor-G, SubSeven, SubSeven Apocalypse, Tiles port 12345 - GabanBus, My Pics, NetBus, Pie Bill Gates, Whack Job, X-bill port 12346 - GabanBus, NetBus, X-bill port 17300 - Kuang2 The Virus port 27374 - SubSeven ciao, Ben Laws Systems Analyst Hobby-Eberly Telescope UT McDonald Observatory Pavel Lozhkin wrote:
Does anyone know about TCP ports 17300,27374,1243,12346,12345 and exploits corresponding for these ports ? Connection attempt to TCP 195.161.130.240:17300 from 195.133.72.11:4088 Connection attempt to TCP 195.161.130.240:27374 from 195.133.72.11:4089 Connection attempt to TCP 195.161.130.240:1243 from 195.133.72.11:4090 Connection attempt to TCP 195.161.130.240:12346 from 195.133.72.11:4091 Connection attempt to TCP 195.161.130.240:12345 from 195.133.72.11:4092 -- ** The hedgehog is a proud bird, he does not fly without kick ** Pauel System administrator ICQ UIN 39596913 8990192 Phone (7-84570)-52525 (7-84570)-40658 Unix is like a wigwam -- no Gates, no Windows, and an Apache inside.
-- "Open source software -- with no walls or fences, who needs Windows and Gates?" Sign the Linux Driver Petition http://www.libranet.com/petition.html
Current thread:
- !! Strange ports for attack Pavel Lozhkin (Aug 14)
- Re: !! Strange ports for attack Andrey G. Sergeev (AKA Andris) (Aug 15)
- Re: !! Strange ports for attack Rune Kristian Viken (Aug 15)
- Re: !! Strange ports for attack Ben Laws (Aug 15)
- Re: !! Strange ports for attack Max Gribov (Aug 15)