Thinking...
[get complete service list]
Top of page
Top of page
Port Information
Protocol Service Name
tcp lnvalarm LNVALARM
udp lnvalarm LNVALARM
Top IPs Scanning
Today Yesterday
94.26.88.59 (2)92.63.197.145 (9)
118.194.250.95 (1)94.26.88.59 (4)
62.60.131.143 (1)206.168.34.131 (2)
162.142.125.128 (1)45.194.70.248 (2)
143.198.30.131 (1)118.193.39.117 (2)
167.94.146.33 (1)167.94.146.45 (2)
101.36.127.85 (1)77.90.185.234 (2)
165.154.41.115 (1)77.83.240.70 (2)
64.95.96.68 (1)138.68.154.198 (2)
165.154.51.90 (1)80.253.246.173 (2)
User Comments
Submitted By Date
Comment
David Tulo 2004-04-30 15:49:19
There is a proxy or trojan scanner hitting TCP ports 80, 2282, 3128, 3382, 6588, 8000, 8080, and 22788. According to LURHQ, during stage 3 of a Sobig.e worm infection, Wingate proxy software is installed and establishes a WWW proxy on TCP port 2282. Additionally, Sobig.f is reported to change the port of the Wingate WWW proxy to 3382.
Top of page
CVE Links
CVE # Description
Top of page