Well going quite out on a limb here, apparently (according to nmap's port
listings) port 10023 is used by a daemon called 'rzstat', which is part of
a package called Zebra, (found @ cern:
http://wwwinfo.cern.ch/asdoc/zebra_html3/zebramain.html ) which provides
dynamic data structuring for high energy physics Fortran programs (I
think...). Given the domain of your email, I'm guessing (and I mean really
wildly guessing) that some future Nobel laureate has decided that you must
have one of these daemons running on it's assigned port, and so has
scanned you for it, if that's your meaning of 'suspicious activity
towards'...
Other than that, could be gremilns...
spiff
On Wed, 4 Oct 2000, Vincent Williams wrote:
> Hi,
>
> Have seen some suspicous activity towards port 10023.
> Have done some quick research and found no information at all regarding that
> particular port. Does anyone have any knowledge about any trojan or else
> that has been seen there?
>
> TIA, Regards
> Vincent
>
>
> ______________________________________________
> FREE Personalized Email at Mail.com
> Sign up at http://www.mail.com/?sr=signup
>
Received on Oct 05 2000