View Single Post
Old 05-01-04, 04:39 AM   #1
Snarkridden
OpenNap Server Operator
 
Snarkridden's Avatar
 
Join Date: Jan 2002
Location: U.K
Posts: 401
Brows Is this something we should be aware of?

Over the last few weeks, I have become aware of a considerable increase of firewall hits for port 17300, maybe 10 per hour or so.

Tracking a few back reveals no specific common site, but one was registered to "UA" "universal" which to me sounds like one of the video or film companies.

My suspicions are aroused, because of this common port, it bares resemblence to previous "Worm" attacks where a trojan is waiting for a trigger on a specific port this triojan having been loaded during site browsing or downloading dodgy files.

Could it be the certain parties are trying new tricks, to get evidence? anyone else notice similarities in their log files?

Zone alarm just report it as blocked and of medium risk !!

Snark.
Snarkridden is offline   Reply With Quote