Security Incidents mailing list archives

Re: TCP 27374 from network 24?


From: George Bakos <alpinista () BIGFOOT COM>
Date: Tue, 3 Oct 2000 12:12:32 -0400

Subseven ( http://www.subseven.org ) has released an updated
version of their notorious trojan server version 2.1.  Its default
listening port is 27374.  2.2 beta is also in private release.
Of course we have all seen scads of 24.0.0.0 traffic.  Our good
friends @home.net.  Cable modem users UNITE!  Oh, yeah...the
script kiddies are already doing that for us.

On 2 Oct 00, at 11:55, Glenn Forbes Fleming Larratt wrote:

We have experienced 13 different nodes in various different netlbk's
in network 24(.0.0.0/8) since this past Tuesday. Are others seeing
this pattern? Is there a spoofer or a rampant spread of some Trojan
in the various cable providers et.al. on that network?

      -g

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 "If you can't make it good, make it look good."
 - Bill Gates

 George Bakos
 alpinista () bigfoot com


Current thread: