Security Incidents mailing list archives
scans on port 57
From: "Ingersoll, Jared" <jared () cswv com>
Date: Tue, 12 Nov 2002 08:00:39 -0500
I'm seeing a lot of blocked scans on port 57 in my firewall logs, many times in conjunction with a port 80 or port 21 scan. I was working under the assumption that these were related to a misconfigured port scanner, but I'm seeing them from a pretty diverse set of source addresses, so now I'm curious what they're looking for. jared ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- scans on port 57 Ingersoll, Jared (Nov 13)
- Re: scans on port 57 John Jørgensen (Nov 13)
- <Possible follow-ups>
- RE: scans on port 57 Vince Hillier (Nov 13)
- RE: scans on port 57 Craig, Scott (Nov 13)