RE: Port 3889 Traffic

From: Rob Shein (shoten_at_starpower.net)
Date: 05/10/04

  • Next message: Nick FitzGerald: "Re: wmon16.exe"
    To: "'Francisco J. Pecorella R.'" <francisco.pecorella@cantv.net>, <incidents@securityfocus.com>
    Date: Mon, 10 May 2004 14:34:47 -0400
    
    

    Fport will only tell him what local apps are using a port. In his case,
    he's seeing traffic originating from the outside, which is being dropped by
    his firewall.

    > -----Original Message-----
    > From: Francisco J. Pecorella R.
    > [mailto:francisco.pecorella@cantv.net]
    > Sent: Monday, May 10, 2004 12:02 PM
    > To: incidents@securityfocus.com
    > Subject: Re: Port 3889 Traffic
    >
    >
    > I am not really sure what application by default uses port 3889.
    >
    > At http://www.iana.org/assignments/port-numbers
    >
    > itv-control 3899/tcp ITV Port
    > itv-control 3899/udp ITV Port
    >
    > I recomend that you use fport at X.X.X.X. This software
    > permit to know what application is opening a specific port.
    >
    > --
    > Best Regards
    >
    > ----- Original Message -----
    > From: <Josh.Berry@compucom.com>
    > To: <incidents@securityfocus.com>
    > Sent: Monday, May 10, 2004 11:30 AM
    > Subject: RE: Port 3889 Traffic
    >
    >
    > > Terminal Services is port 3389, not really sure what port
    > 3889 is used
    > > for.
    > >
    > > -----Original Message-----
    > > From: kang [mailto:kang@insecure.ws]
    > > Sent: Monday, May 10, 2004 9:59 AM
    > > To: incidents@securityfocus.com
    > > Subject: Re: Port 3889 Traffic
    > >
    > > Eric Ceradsky wrote:
    > > > I've been seeing a lot of port 3889 traffic externally lately but
    > > > haven't been able to dig up any known issues with that
    > port.. Used
    > > > to be one address and overnight tis quickly spawned to several.
    > > > Brazil, US, UK, etc. Anyone have any ideas?
    > >
    > > that's Terminal Server, or Remote Desktop, on Windows.
    > > An utility to take a visual remote control of a computer.
    > >
    > >
    > >
    > ----------------------------------------------------------------------
    > > --
    > > ---
    > >
    > --------------------------------------------------------------
    > ----------
    > > ----
    > >
    > >
    > >
    > >
    > >
    > ----------------------------------------------------------------------
    > > ----
    > -
    > >
    > ----------------------------------------------------------------------
    > > ----
    > --
    > >
    > >
    >
    >
    > --------------------------------------------------------------
    > -------------
    > --------------------------------------------------------------
    > --------------
    >
    >
    >

    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------


  • Next message: Nick FitzGerald: "Re: wmon16.exe"