OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: TCP port 5000 syn increasing

From: Leonardo (lmuroyauol.com.br)
Date: Mon May 17 2004 - 15:00:03 CDT


http://isc.sans.org/port_details.php?port=5000

----- Original Message -----
From: "Rohny Jotton" <rohnyjottonhotmail.com>
To: <incidentssecurityfocus.com>
Sent: Sunday, May 16, 2004 9:49 PM
Subject: TCP port 5000 syn increasing

> I'm seeing a large amount of these attempts starting around 1:00 PM EST
> Sunday. They're getting blocked at the edge so I don't have any more info
> than that. I'm seeing about one a second from various hosts/networks.
>
> isc.sans.org shows that port related to various backdoors. Someone or
> something is getting busy.
>
> _________________________________________________________________
> MSN Toolbar provides one-click access to Hotmail from any Web page - FREE
> download! http://toolbar.msn.click-url.com/go/onm00200413ave/direct/01/
>
>
> --------------------------------------------------------------------------
-
> --------------------------------------------------------------------------
--
>

---------------------------------------------------------------------------
----------------------------------------------------------------------------