Port 1981 UDP trojan/worm?

From: Devdas Bhagat (devdasat_private)
Date: Wed Apr 25 2001 - 03:44:03 PDT

Next message: Jon O.: "Re: scan for 109, new worm-variant or simple scan?"

Previous message: Scott Nursten: "Re: scan for 109, new worm-variant or simple scan?"
Next in thread: Joakim von Braun: "Re: Port 1981 UDP trojan/worm?"
Reply: Joakim von Braun: "Re: Port 1981 UDP trojan/worm?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Apr 25 15:31:11 ns1 kernel: Packet log: input DENY eth0 PROTO=17
207.199.68.253:61306 <my_ip>:1981 L=169 S=0x00 I=1741 F=0x0000 T=107
(#24) 

Time is +5:30 GMT. I'm getting lots of these scans for the past two
days, random hosts from all over the world. 

Devdas Bhagat
--
Good day to avoid cops.  Crawl to school.

Next message: Jon O.: "Re: scan for 109, new worm-variant or simple scan?"
Previous message: Scott Nursten: "Re: scan for 109, new worm-variant or simple scan?"
Next in thread: Joakim von Braun: "Re: Port 1981 UDP trojan/worm?"
Reply: Joakim von Braun: "Re: Port 1981 UDP trojan/worm?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Apr 25 2001 - 12:54:12 PDT