Re: IDS: Scanning on tcp port 27374

[DPG <dgailey@insync.net>]

Archive: http://msgs.securepoint.com/ids
FAQ: http://www.ticm.com/kb/faq/idsfaq.html
IDS: http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems... email questions to ids-owner@uow.edu.au
NOTE: Remove this section from reply msgs otherwise the msg will bounce.
SPAM: DO NOT send unsolicted mail to this list.
UNSUBSCRIBE: email "unsubscribe ids" to majordomo@uow.edu.au
-----------------------------------------------------------------------------
Judging by the position of the port,
it seems to be perhaps someone scanning for open backdoors.
no real service that is SUID root, runs above 1024.
so we can cancel out any service comprimises that would seem obvious.

-d p g


.                                                 .
                        . 

             
                                       
        
                             

   
                                .