TCP Port 1923 - Spice?

[Kr0m]

I've seen a number of probes from various addresses to port 1923. From what I've read it's used by some sort of Spice Server?
Has there been some sort of exploit/worm affecting systems running these servers? Anyone else notice this?

 

[Enyo]

Im not aware of any specific threat relating to this port however ISC did see a small increase yesterday.

http://isc.incidents.org/port_details.html?port=1923

I have seen no other significant change.

You mention its various address is it the same address block? Or multiple blocks?

Check up on the IP(s) in question with MyNetWatchman