[70517] in North American Network Operators' Group
Port 5000
daemon@ATHENA.MIT.EDU (Geo.)
Tue May 18 09:15:33 2004
From: "Geo." <geoincidents@nls.net>
To: <nanog@merit.edu>
Date: Tue, 18 May 2004 09:15:17 -0400
In-Reply-To: <40A9F170.3020108@solid-state-logic.com>
Errors-To: owner-nanog-outgoing@merit.edu
We are seeing many customers here probing port 5000 across the network. It
appears to be some new worm or something but I've had no luck yet in
figuring out what it is except to say norton AV detects nothing yet.
Anyone have a clue?
http://isc.incidents.org/port_details.php?isc=b4827221b7f45feeb0c12bc5040cab
c9&port=5000&repax=1&tarax=2&srcax=2&percent=N&days=10&Redraw=Submit+Query
the jump in traffic is obvious.
Geo.