Security Incidents mailing list archives
Re: Strange back-orifice looking scan...
From: Neil Dickey <neil () geol niu edu>
Date: Thu, 5 Sep 2002 12:59:36 -0500 (CDT)
Jeff Kell <jeff-kell () utc edu> wrote in part:
Port 1214 used by Kazaa aka Morpheus, this is obviously the remote port that the "scanner" is using. Port 31336 IS used by Back Orifice 2000 aka BO2k aka DeepBO (this is a special release of BO btw).But this is UDP, not TCP.
My source ( IANA ) shows this for Kazaa: kazaa 1214/tcp KAZAA kazaa 1214/udp KAZAA Best regards, Neil Dickey, Ph.D. Research Associate/Sysop Geology Department Northern Illinois University DeKalb, Illinois 60115 ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Strange back-orifice looking scan... Jeff Kell (Sep 04)
- <Possible follow-ups>
- Re: Strange back-orifice looking scan... KoRe MeLtDoWn (Sep 05)
- Re: Strange back-orifice looking scan... Jeff Kell (Sep 05)
- Re: Strange back-orifice looking scan... Neil Dickey (Sep 05)
- Re: Strange back-orifice looking scan... Scott Nursten (Sep 11)