Security Incidents mailing list archives
Re: TCP 27374 from network 24?
From: George Bakos <alpinista () BIGFOOT COM>
Date: Tue, 3 Oct 2000 12:12:32 -0400
Subseven ( http://www.subseven.org ) has released an updated version of their notorious trojan server version 2.1. Its default listening port is 27374. 2.2 beta is also in private release. Of course we have all seen scads of 24.0.0.0 traffic. Our good friends @home.net. Cable modem users UNITE! Oh, yeah...the script kiddies are already doing that for us. On 2 Oct 00, at 11:55, Glenn Forbes Fleming Larratt wrote:
We have experienced 13 different nodes in various different netlbk's in network 24(.0.0.0/8) since this past Tuesday. Are others seeing this pattern? Is there a spoofer or a rampant spread of some Trojan in the various cable providers et.al. on that network? -g
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "If you can't make it good, make it look good." - Bill Gates George Bakos alpinista () bigfoot com
Current thread:
- TCP 27374 from network 24? Glenn Forbes Fleming Larratt (Oct 02)
- Re: TCP 27374 from network 24? George Bakos (Oct 03)
- <Possible follow-ups>
- Re: TCP 27374 from network 24? Boris Badenov (Oct 06)