Date: Tue, 11 Dec 2001 16:24:27 +0000 (GMT) From: Gavin Atkinson <gavin@ury.york.ac.uk> To: FreeBSD Questions <freebsd-questions@FreeBSD.ORG> Subject: Re: What is the purpose of port 27374? Message-ID: <Pine.BSF.4.33.0112111621500.20323-100000@ury.york.ac.uk> In-Reply-To: <20011211162101.GA27137@keyslapper.org>
next in thread | previous in thread | raw e-mail | index | archive | help
I've just google'd "port 27374" and the top 10 results all answer your question. It's a port used by the SubSeven trojan. Somebody scanned you in the hope that you'd (unknowingly) have the trojan running. http://vil.nai.com/villib/dispVirus.asp?virus_k=3D10566 gavin On Tue, 11 Dec 2001, Louis LeBlanc wrote: > I've been trying to clean up my firewall, and make sure I'm not > blocking any traffic I want to allow, not allowing anything I want to > block, etc.. To this end, I recompiled my kernel (When I did my latest > buildworld, kernel, etc) to allow more than 10 log entries per rule. I > then set all the questionable rules to log 250 hits. > > The primary reason for my efforts is the following log entry: > Dec 10 14:57:59 keyslapper /kernel: ipfw: 65000 Deny TCP \ > 24.226.33.159:3082 24.91.160.222:27374 in via xl0 > > Now, the source IP and port are usually different, but the local port > is always different, and I have no other entries from the source IP. > > So what the devil is port 27374 expected to give up? I can't find it > in /etc/services. > > Thanks > Lou > -- > Louis LeBlanc leblanc@keyslapper.org > Fully Funded Hobbyist, KeySlapper Extrordinaire :) > http://www.keyslapper.org =D4=BF=D4=AC > > Sitophobia: > Fear of food. > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0112111621500.20323-100000>