OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: Port 3889 Traffic

From: Rob Shein (shotenstarpower.net)
Date: Mon May 10 2004 - 13:34:47 CDT


Fport will only tell him what local apps are using a port. In his case,
he's seeing traffic originating from the outside, which is being dropped by
his firewall.

> -----Original Message-----
> From: Francisco J. Pecorella R.
> [mailto:francisco.pecorellacantv.net]
> Sent: Monday, May 10, 2004 12:02 PM
> To: incidentssecurityfocus.com
> Subject: Re: Port 3889 Traffic
>
>
> I am not really sure what application by default uses port 3889.
>
> At http://www.iana.org/assignments/port-numbers
>
> itv-control 3899/tcp ITV Port
> itv-control 3899/udp ITV Port
>
> I recomend that you use fport at X.X.X.X. This software
> permit to know what application is opening a specific port.
>
> --
> Best Regards
>
> ----- Original Message -----
> From: <Josh.Berrycompucom.com>
> To: <incidentssecurityfocus.com>
> Sent: Monday, May 10, 2004 11:30 AM
> Subject: RE: Port 3889 Traffic
>
>
> > Terminal Services is port 3389, not really sure what port
> 3889 is used
> > for.
> >
> > -----Original Message-----
> > From: kang [mailto:kanginsecure.ws]
> > Sent: Monday, May 10, 2004 9:59 AM
> > To: incidentssecurityfocus.com
> > Subject: Re: Port 3889 Traffic
> >
> > Eric Ceradsky wrote:
> > > I've been seeing a lot of port 3889 traffic externally lately but
> > > haven't been able to dig up any known issues with that
> port.. Used
> > > to be one address and overnight tis quickly spawned to several.
> > > Brazil, US, UK, etc. Anyone have any ideas?
> >
> > that's Terminal Server, or Remote Desktop, on Windows.
> > An utility to take a visual remote control of a computer.
> >
> >
> >
> ----------------------------------------------------------------------
> > --
> > ---
> >
> --------------------------------------------------------------
> ----------
> > ----
> >
> >
> >
> >
> >
> ----------------------------------------------------------------------
> > ----
> -
> >
> ----------------------------------------------------------------------
> > ----
> --
> >
> >
>
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> --------------
>
>
>

---------------------------------------------------------------------------
----------------------------------------------------------------------------