Security Incidents mailing list archives

RE: Port 3889 Traffic


From: "Rob Shein" <shoten () starpower net>
Date: Mon, 10 May 2004 14:34:47 -0400

Fport will only tell him what local apps are using a port.  In his case,
he's seeing traffic originating from the outside, which is being dropped by
his firewall.

-----Original Message-----
From: Francisco J. Pecorella R. 
[mailto:francisco.pecorella () cantv net] 
Sent: Monday, May 10, 2004 12:02 PM
To: incidents () securityfocus com
Subject: Re: Port 3889 Traffic


I am not really sure what application by default uses port 3889.

At http://www.iana.org/assignments/port-numbers

itv-control     3899/tcp   ITV Port
itv-control     3899/udp   ITV Port

I recomend that you use fport at X.X.X.X. This software 
permit to know what application is opening a specific port.

--
Best Regards

----- Original Message ----- 
From: <Josh.Berry () compucom com>
To: <incidents () securityfocus com>
Sent: Monday, May 10, 2004 11:30 AM
Subject: RE: Port 3889 Traffic


Terminal Services is port 3389, not really sure what port 
3889 is used 
for.

-----Original Message-----
From: kang [mailto:kang () insecure ws]
Sent: Monday, May 10, 2004 9:59 AM
To: incidents () securityfocus com
Subject: Re: Port 3889 Traffic

Eric Ceradsky wrote:
I've been seeing a lot of port 3889 traffic externally lately but 
haven't been able to dig up any known issues with that 
port.. Used 
to be one address and overnight tis quickly spawned to several. 
Brazil, US, UK, etc. Anyone have any ideas?

that's Terminal Server, or Remote Desktop, on Windows.
An utility to take a visual remote control of a computer.



----------------------------------------------------------------------
--
---

--------------------------------------------------------------
----------
----





----------------------------------------------------------------------
----
-

----------------------------------------------------------------------
----
--




--------------------------------------------------------------
-------------
--------------------------------------------------------------
--------------





---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: