[Dshield] Port 2232

Stephane Grobety security at admin.fulgan.com
Tue Aug 5 14:09:43 GMT 2003


RMcc> Hey all
RMcc>       Has anyone seen a fair amount of traffic to port 2232 over the past
RMcc> few weeks. I have been seeing it on a daily basis and it normally comes in
RMcc> a port scan across my domain.

Well, you didn't specify if it was UDP or TCP but this port is only
registered to use with the IVS video streaming system for video data.
AFAIK, there isn't any know vulnerability about this service. Of
course, it could simply be that some script kiddy launched an automated
attack against your IP range that should have resulted in a trojan
listening on that port and that whoever did is is now trying to
collect the results...

Good luck,
Stephane




More information about the list mailing list