|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Re: unknown port numbers
From: Kovacs Andrei (andik
DEC.COM.RO)Date: Thu Mar 02 2000 - 03:02:16 CST
- Next message: Lison, Nathan: "Re: Cracked; rootkit - entrapment question?"
- Previous message: Rob Quinn: "Complaining to providers (was: home: Is *anyone* really home there???"
- Maybe reply: Kovacs Andrei: "Re: unknown port numbers"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Tue, 29 Feb 2000, Rolandas Juodzbalis wrote:
> Where on the net, I can find port<->program(trojan,etc) description?
> There is some strange connection log to my system:
>
> Feb 19 18:44:18 TCP: port 28744 connection attempt from *.*.*.*:62757
> Feb 19 18:44:36 TCP: port 52252 connection attempt from *.*.*.*:62758
> Feb 19 18:45:06 TCP: port 15505 connection attempt from *.*.*.*:62759
> Feb 19 18:45:30 TCP: port 17262 connection attempt from *.*.*.*:62760
> Feb 19 18:48:16 TCP: port 41316 connection attempt from *.*.*.*:62762
>
Ports over 61000 are usually used on Linux machines running IP Masquerade, so
my guess is that someone behind a Linux Masquerade Proxy portscanned you.
Kovacs Andrei
- Next message: Lison, Nathan: "Re: Cracked; rootkit - entrapment question?"
- Previous message: Rob Quinn: "Complaining to providers (was: home: Is *anyone* really home there???"
- Maybe reply: Kovacs Andrei: "Re: unknown port numbers"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]