[ale] Port Numbers

[db at amorphous.org (Dave Brooks)]

A quick google search shows that port 27374 is a listener port for 
subseven, ramen, or a number of other recent trojans that have popped up 
for linux.

Also found this link, might be helpful for some of you trying to maintain a 
list of firewall rules:  

http://www.simovits.com/trojans/trojans.html

Best,
Dave

> I have my Linux firewall set up to block, and log, any incoming SYN
> packets. The format of the log message is:
> 
>   "date, stuff, his_IP:port, my_IP:port, otherstuff"
> 
> One of the favorite port numbers in the "my_IP:port" portion seems to
> be 27374. Is there some significance to this port number?
> 
> -Robert


-- 
david a. brooks
db at amorphous.org
voice: .. 678/427-8216
:wq!

--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.