TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
That looks like the port used by the t0rn root kit, which is recently being
installed by the Lion Worm:
http://www.sans.org/y2k/lion.htm
http://www.sans.org/y2k/t0rn.htm
http://advice.networkice.com/advice/Exploits/Ports/47017/default.htm
Gary
Gary Love
SAIC Secure Business Solutions Group
SPAWAR Systems Center, San Diego
[EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, June 05, 2001 11:10 PM
To: [EMAIL PROTECTED]
Subject: Port 47017?
TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------
Hello!
Do anybody know what port 47017 is used for? Our network have been scann for
this port.
Sevald O. Lund
Systemkonsulent
____________________________________________________________________________
______
Direkte: 73 53 94 58 Mobil: 93 01 15 64
Sentralbord: 73 53 95 00 Telefaks: 73 53 95 01
E-post: [EMAIL PROTECTED]
Eterra as,
Stiklestadveien 3
7489 TRONDHEIM
Organisasjonsnr. 976239997
http://www.eterra.no
Et Merkantildata selskap
