RE: Large increase in port 27347

From: Bassett, Mark (mbassett_at_omaha.com)
Date: 10/29/03

  • Next message: Jim Harrison (ISA): "RE: Administrivia: Are you seeing portscans from source 127.0.0.1 source port 80?"
    Date: Wed, 29 Oct 2003 08:59:28 -0600
    To: <incidents@securityfocus.com>
    
    

    Due to the number of responses, I'd just like to point out that SubSeven
    uses 27374 not 27347. And for those of you who asked this is tcp
    activity not udp.

    Mark Bassett
    Network Administrator
    World media company
    Omaha.com
    402-898-2079

    -----Original Message-----
    From: Bassett, Mark
    Sent: Tuesday, October 28, 2003 4:46 PM
    To: incidents@securityfocus.com
    Subject: Large increase in port 27347

    MAJOR increase in port 27347 hits. If anyone manages to capture
    whatever this is please post immediately =) Be on the lookout folks.

    http://isc.incidents.org/port_details.html?port=27347

    Mark Bassett
    Network Administrator
    World media company
    Omaha.com
    402-898-2079

    ------------------------------------------------------------------------

    ---
    Network with over 10,000 of the brightest minds in information security
    at the largest, most highly-anticipated industry event of the year.
    Don't miss RSA Conference 2004! Choose from over 200 class sessions and
    see demos from more than 250 industry vendors. If your job touches
    security, you need to be here. Learn more or register at
    http://www.securityfocus.com/sponsor/RSA_incidents_031023
    and use priority code SF4.
    ------------------------------------------------------------------------
    ----
    ************************************************************
    Omaha World-Herald Company computer systems are for business use only.
    This e-mail was scanned by MailSweeper
    ************************************************************
    ---------------------------------------------------------------------------
    Network with over 10,000 of the brightest minds in information security
    at the largest, most highly-anticipated industry event of the year.
    Don't miss RSA Conference 2004! Choose from over 200 class sessions and
    see demos from more than 250 industry vendors. If your job touches
    security, you need to be here. Learn more or register at
    http://www.securityfocus.com/sponsor/RSA_incidents_031023
    and use priority code SF4.
    ----------------------------------------------------------------------------
    

  • Next message: Jim Harrison (ISA): "RE: Administrivia: Are you seeing portscans from source 127.0.0.1 source port 80?"

    Relevant Pages

    • Re: Nmap output
      ... most highly-anticipated industry event of the year. ... Choose from over 200 class sessions and ... Network with over 10,000 of the brightest minds in information security ...
      (Pen-Test)
    • RE: MS03-049 Scanner?
      ... Network with over 10,000 of the brightest minds in information security ... most highly-anticipated industry event of the year. ... and use priority code SF4. ...
      (Focus-Microsoft)
    • Re: strange ftp site
      ... >Network with over 10,000 of the brightest minds in information security ... most highly-anticipated industry event of the year. ... Learn more or register at ... >and use priority code SF4. ...
      (Incidents)
    • RE: Nmap output
      ... Subject: Nmap output ... Network with over 10,000 of the brightest minds in information security ... most highly-anticipated industry event of the year. ...
      (Pen-Test)
    • RE: SQL Slammer doing the rounds again?
      ... our network spans the Northeast America. ... SQL Slammer doing the rounds again? ... Network with over 10,000 of the brightest minds in information security ... most highly-anticipated industry event of the year. ...
      (Incidents)

  • Quantcast