Re: Port 1026

From: Andrew Keith (andrew_at_jukenworld.com)
Date: 06/18/04

  • Next message: Dimitri Maziuk: "Re: Home networking lab"
    Date: Fri, 18 Jun 2004 17:10:34 +0800
    
    

    hacker trying to break in .. or maybe a script kiddie finding for a soft
    spot .

    block that port , kill the offending program (if there is one opening that
    port)

    from nmap.services.

    cap 1026/tcp LSA-or-nterm nterm # calender access protocol, nterm
    remote_login network_terminal, remote_login network_terminal

    Andrew

    "Shadow_7" <wwwshadow7@yaNOhoo.comNULL> wrote in message
    news:pan.2004.06.16.12.08.19.120503@yaNOhoo.comNULL...
    > > Anyone know what this is. I have been getting this from 12.148.162.131
    > > for about a week now. I am using Linux Mandrake 8.1 with kernel 2.4.8
    > > with iptables.
    > >
    > >
    > > iplog2|grep UDP
    > > Jun 14 20:12:14 -0700 SRC=12.148.162.131 DST=63.184.1.105 PROTO=UDP
    > > SPT=9092 DPT=1026
    >
    > According to nmaps ports_nmap.txt file:
    >
    > nterm 1026/tcp # nterm, remote_login_network_terminal
    >
    > Shadow_7


  • Next message: Dimitri Maziuk: "Re: Home networking lab"