RE: port 27374

[Bryan Scaringe <bryan.scaringe@computer.org>]

This is a scan for Sub-7, a nasty little trojan.

A good place for info on what you're seening in your security logs is:
         http://www.robertgraham.com/pubs/firewall-seen.html

Whenever someone scans me for sub-7 (or any other trojan) I add their IP to my
ipchains script.   Today they are looking for Sub-7, tomorrow they may be
looking for a hole in something I DO have, like sshd.


Brysn


On 10-Jun-2000 Joseph Kafka wrote:
> Hello, I have been the subject of repeated scans of port 27374 on
> my system by the same IP address, over and over again.What 
> might their intent be? Please advise. jkafka@san.rr.com