Security Incidents: Re: TCP 27374 from network 24?

From: George Bakos <alpinista_at_BIGFOOT.COM>
Date: Tue, 3 Oct 2000 12:12:32 -0400

Subseven ( http://www.subseven.org ) has released an updated
version of their notorious trojan server version 2.1. Its default
listening port is 27374. 2.2 beta is also in private release.
Of course we have all seen scads of 24.0.0.0 traffic. Our good
friends @home.net. Cable modem users UNITE! Oh, yeah...the
script kiddies are already doing that for us.

On 2 Oct 00, at 11:55, Glenn Forbes Fleming Larratt wrote:

> We have experienced 13 different nodes in various different netlbk's
> in network 24(.0.0.0/8) since this past Tuesday. Are others seeing
> this pattern? Is there a spoofer or a rampant spread of some Trojan
> in the various cable providers et.al. on that network?
>
> -g
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"If you can't make it good, make it look good."
- Bill Gates

George Bakos
alpinista_at_bigfoot.com
Received on Oct 03 2000