|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] Hits on certain ports... What are they used for?
http://www.sans.org/newlook/resources/IDFAQ/oddports.htm http://www.iana.org/assignments/port-numbers This first link is a list of common backdoor trojans, the second is the list of well known ports. They may not list all of these ports, but they are a good resource for everyone. -----Original Message----- From: Sterling, Chuck [mailto:[email protected]] Sent: Thursday, May 24, 2001 9:20 AM To: 'Fw-1-Mailinglist (E-mail)' Subject: [FW1] Hits on certain ports... What are they used for? Importance: Low Lately I've seen bursts of hits from a source trying a small set of ports on a destination. Later the same source may try another destination. Other sources will also try the same set of ports on other destinations. I assume the sources are looking for vulnerabilities or trojan servers, but haven't had any success finding out which ones: 2400 3879 5300 6635 8282 9112 9705 11753 22223 22252 39168 There are a few others that show up in the same set, but these are the ones I haven't a label for. Anybody know what any of these are used for? Thanks... Chuck Sterling System / Network Administrator NASA White Sands Test Facility Las Cruces, New Mexico, USAMagic is REAL, unless declared INTEGER ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
