Security Incidents mailing list archives

RE: Port 3889 Traffic


From: "Samuel Petreski" <petreski () ksu edu>
Date: Mon, 10 May 2004 10:20:31 -0500

Nope ... Terminal Server/RDS is 3389 ....

Samuel Petreski
petreski () ksu edu 

-----Original Message-----
From: kang [mailto:kang () insecure ws] 
Sent: Monday, May 10, 2004 9:59 AM
To: incidents () securityfocus com
Subject: Re: Port 3889 Traffic

Eric Ceradsky wrote:
I've been seeing a lot of port 3889 traffic externally
lately but haven't been able to dig up any known
issues with that port.. Used to be one address and
overnight tis quickly spawned to several. Brazil, US,
UK, etc. Anyone have any ideas?

that's Terminal Server, or Remote Desktop, on Windows.
An utility to take a visual remote control of a computer.


---------------------------------------------------------------------------
----------------------------------------------------------------------------



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: