Web Hosting Talk : Web Hosting Main Forums : Hosting Security and Technology : Anyone know what Service: 15118 is?

[Soulwatcher1974]

Every day in my server logs I get about 5 to 10 logged ips for Service: 15118. Anyone know what service this is?

[boonchuan]

It is just a worm trying to probe and infect your system, not a worry.

[Brightadmin]

hi,

i think port 15118 is for tcp,udp.

thank you.

[ub3r]

this website says:

Typically unsolicited inbound traffic to this port are Dipnet/Oddbob scans which is a worm that was designed to infect and control systems for use within BotNets via IRC issued commands. Dipnet/Oddbob infects systems via an old exploit on TCP Port 445 made famous by the Sasser Worm which was released in May 2004 in which in itself is rather disappointing as it indicates that these infected systems are poorly maintained as there has been a patch available via Windows Update for this exploit for well over a year (Microsoft Security Bulletin MS04-011). Dipnet/Oddbob also scans TCP port 11768.

unless you have something running on that port, you shouldn't be worried.

[nadtz]

Originally posted by Brightadmin
hi,

i think port 15118 is for tcp,udp.

thank you.

eh?

[Bashar]

Originally posted by Soulwatcher1974
Every day in my server logs I get about 5 to 10 logged ips for Service: 15118. Anyone know what service this is?

try telnet localhost 15118

i would worry if it says "logged"

might be a bind shell backdoor where people can login remotely without a user/pass

try to download rkhunter from www.rootkit.nl and run it, it will give you more info