OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: H. Morrow Long (morrow.long_at_yale.edu)
Date: Sun Sep 22 2002 - 15:10:05 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Several (see http://diswww.mit.edu/charon/nanog/52239) have noticed
    Slapper using UDP port 4156 today (and apparently yesterday as well
    as I can see from netflow logs).

    I've also noticed a Slapper variant apparently using UDP port 1978
    today as well (one of our hosts on which Slapper is no longer active
    is continuing to receive UDP packets to and from port 1978 from many
    Internet sites).

    H. Morrow Long
    University Information Security Officer
    Director, Information Security Office
    Yale University, ITS

    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management
    and tracking system please see: http://aris.securityfocus.com