[aclug-L] Re: A New Virus???

[Jeff Vian <jvian10@xxxxxxxxxxx>]

On Sun, 2005-11-27 at 19:18 -0600, bbales wrote:
> During the last few days my firewall has been turning away hundreds of hits 
> destined for port 15056.  Last night there were 877 hits, mostly between 
> 4:00 AM and 4:00 PM.  Googling for port 15056 doesn't turn up anything 
> useful.
> 
> Before Nov. 25, I hadn't seen any attempts at that port.  Anyone else 
> seeing this?
> bruce
> 

Maybe it is an attempt to exploit this flaw.
http://www.osvdb.org/displayvuln.php?osvdb_id=15056


If so, not a virus but a script kiddie type attack on a known flaw in
non-updated systems.

BTW, that was the 3rd hit for me on a search for 15056 with google.

> -- This is the discussion@xxxxxxxxx list.  To unsubscribe,
> visit http://www.complete.org/cgi-bin/listargate-aclug.cgi

-- This is the discussion@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi