OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Port 3889 Traffic

From: Samuel Petreski (petreskiksu.edu)
Date: Mon May 10 2004 - 10:20:31 CDT


Nope ... Terminal Server/RDS is 3389 ....

Samuel Petreski
petreskiksu.edu

-----Original Message-----
From: kang [mailto:kanginsecure.ws]
Sent: Monday, May 10, 2004 9:59 AM
To: incidentssecurityfocus.com
Subject: Re: Port 3889 Traffic

Eric Ceradsky wrote:
> I've been seeing a lot of port 3889 traffic externally
> lately but haven't been able to dig up any known
> issues with that port.. Used to be one address and
> overnight tis quickly spawned to several. Brazil, US,
> UK, etc. Anyone have any ideas?

that's Terminal Server, or Remote Desktop, on Windows.
An utility to take a visual remote control of a computer.

---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------