RE: Abnormal activity.
From: Michael Carroll (carrollm_at_wclc.com)
Date: 04/02/04
- Previous message: Harry de Grote: "Re: Encrypted Remote display?"
- Maybe in reply to: Brendan Halliday: "Abnormal activity."
- Next in thread: admin_at_kryptnet.de: "Re: Abnormal activity."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "'security-basics@securityfocus.com'" <security-basics@securityfocus.com> Date: Fri, 2 Apr 2004 12:24:11 -0600
If you ever wanted to know what service/application is linked to a port, you
can use these links to help...note, these are not the only resources, but by
far, the easiest and IMO, most useful:
http://isc.incidents.org/ (and type in the port # and query away)
http://www.chebucto.ns.ca/~rakerman/trojan-port-table.html
http://www.simovits.com/trojans/trojans.html
Good luck.
M
-----Original Message-----
From: Stefan Dengscherz [mailto:sd@lostdns.net]
Sent: Thursday, April 01, 2004 11:57 AM
To: security-basics@securityfocus.com
Subject: Re: Abnormal activity.
Hello Brendan,
port 4662 is used by the well known p2p application Edonkey. so if you have
a dynamic ip for example it is quite likely that other users try to connect.
cheers,
Stefan Dengscherz
http://www.lostdns.net/
On Thu, 1 Apr 2004 19:00:57 +1000
"Brendan Halliday" <guardmasta@froggy.com.au> wrote:
> Evening,
>
> I may just be oversensitive, but is anyone here receiving mass amounts
> of connection requests on port 4662?
>
> If not, could someone point me to some documentation of what is
> happening?
>
> Cheers,
> Brendan Halliday AKA p0m, Guardmasta, Maero, Dwervan
> Network Engineer\Analyst\Administrator\Security Consultant in Training
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.631 / Virus Database: 404 - Release Date: 17/03/2004
>
>
>
>
---------------------------------------------------------------------------
> Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
> any course! All of our class sizes are guaranteed to be 10 students or
less
> to facilitate one-on-one interaction with one of our expert instructors.
> Attend a course taught by an expert instructor with years of in-the-field
> pen testing experience in our state of the art hacking lab. Master the
skills
> of an Ethical Hacker to better assess the security of your organization.
> Visit us at:
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
>
----------------------------------------------------------------------------
>
---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the
skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------
---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------
- Previous message: Harry de Grote: "Re: Encrypted Remote display?"
- Maybe in reply to: Brendan Halliday: "Abnormal activity."
- Next in thread: admin_at_kryptnet.de: "Re: Abnormal activity."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|