Security Incidents mailing list archives
Re: Port 38293
From: Talisker () NETWORKINTRUSION CO UK (Talisker)
Date: Sat, 22 Jul 2000 19:51:58 +0100
Tim I didnt find much however, the following link may indicate that you are not alone http://www.moongroup.com/Redhat10/msg00754.html I have included a small page dedicated to identifying these ports on my website at www.networkintrusion.co.uk basically what applications are running on these boxes, have you considered a protocol analyser, a knocked down version of netmon comes with NT Server if you have SMS then you get a full blown copy of netmon. Take Care Andy ''' (0 0) ----oOO----(_)---------- | The geek shall | | Inherit the earth | -----------------oOO---- |__|__| || || ooO Ooo The opinions contained within this transmission are entirely my own, and do not necessarily reflect those of my employer. ----- Original Message ----- From: "Tim H" <tim45738 () HOTMAIL COM> To: <INCIDENTS () securityfocus com> Sent: Friday, July 21, 2000 8:14 PM Subject: Port 38293
Does anyone know what this port is usually used for? I can't find any doc from Microsoft on it and it seems to get hit a lot. All of the attempts
are
coming from NT machines. Thanks, Tim ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
Current thread:
- Re: 85.85.85.85 weirdness, (continued)
- Re: 85.85.85.85 weirdness Pascal Bouchareine (Jul 19)
- Re: 85.85.85.85 weirdness Wozz (Jul 19)
- Re: 85.85.85.85 weirdness Jud (Jul 19)
- msnhome.talkcity.com Dirk Koopman (Jul 21)
- Re: msnhome.talkcity.com Ryan Yagatich (Jul 24)
- Anyone ever heard of "rlumkaus" virus/bug/trojan/backdoor? Litscher, Steven (Jul 21)
- Sudden increase in scans. Rune Kristian Viken (Jul 20)
- Re: Sudden increase in scans. Aaron Kelley (Jul 24)
- Wierd Windows 98 bug? Mark Collins (Jul 20)
- Port 38293 Tim H (Jul 21)
- Re: Port 38293 Talisker (Jul 22)
- Re: scan log and subsequent response from the host's ISP Pauel Loshkin (Jul 10)