Re: !! Strange ports for attack

[Ben Laws <ben () ION AS UTEXAS EDU>]

Howdy Pavel,

These are all commonly used ports for various trojans.  They're scanning
your systems for trojans active on these ports.

> From http://www.simovits.com/nyheter9902.html :

port 1243 - BackDoor-G, SubSeven, SubSeven Apocalypse, Tiles
port 12345 - GabanBus, My Pics, NetBus, Pie Bill Gates, Whack Job,
    X-bill
port 12346 - GabanBus, NetBus, X-bill
port 17300 - Kuang2 The Virus
port 27374 - SubSeven

ciao,

Ben Laws
Systems Analyst
Hobby-Eberly Telescope
UT McDonald Observatory

Pavel Lozhkin wrote:
> Does anyone know about TCP ports 17300,27374,1243,12346,12345 and
> exploits corresponding for these ports ?
>
> Connection attempt to TCP 195.161.130.240:17300 from 195.133.72.11:4088
> Connection attempt to TCP 195.161.130.240:27374 from 195.133.72.11:4089
> Connection attempt to TCP 195.161.130.240:1243 from 195.133.72.11:4090
> Connection attempt to TCP 195.161.130.240:12346 from 195.133.72.11:4091
> Connection attempt to TCP 195.161.130.240:12345 from 195.133.72.11:4092
>
> --
> ** The hedgehog is a proud bird, he does not fly without kick **
>
> Pauel
> System administrator
> ICQ UIN 39596913 8990192
> Phone (7-84570)-52525
>       (7-84570)-40658
>
> Unix is like a wigwam -- no Gates, no Windows, and an Apache inside.

--
"Open source software -- with no walls or fences, who needs Windows and
Gates?"

Sign the Linux Driver Petition
http://www.libranet.com/petition.html