Security Incidents mailing list archives
TCP port 5000 syn increasing
From: "Rohny Jotton" <rohnyjotton () hotmail com>
Date: Sun, 16 May 2004 20:49:06 -0400
I'm seeing a large amount of these attempts starting around 1:00 PM EST Sunday. They're getting blocked at the edge so I don't have any more info than that. I'm seeing about one a second from various hosts/networks.
isc.sans.org shows that port related to various backdoors. Someone or something is getting busy.
_________________________________________________________________MSN Toolbar provides one-click access to Hotmail from any Web page FREE download! http://toolbar.msn.click-url.com/go/onm00200413ave/direct/01/
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- TCP port 5000 syn increasing Rohny Jotton (May 17)
- Re: TCP port 5000 syn increasing Andreas (May 17)
- Re: TCP port 5000 syn increasing ANDREW STREULE (May 17)
- Re: TCP port 5000 syn increasing Paul Schmehl (May 17)
- Re: TCP port 5000 syn increasing Noel Cuillandre (May 17)
- Re: TCP port 5000 syn increasing Mike Barushok (May 18)
- Re: TCP port 5000 syn increasing ANDREW STREULE (May 17)
- Re: TCP port 5000 syn increasing Andreas (May 17)
- <Possible follow-ups>
- RE: TCP port 5000 syn increasing Terence Runge (May 17)
- RE: TCP port 5000 syn increasing Jose Nazario (May 18)
- RE: TCP port 5000 syn increasing Paul Schmehl (May 18)
- RE: TCP port 5000 syn increasing Frank Knobbe (May 18)
- RE: TCP port 5000 syn increasing Jose Nazario (May 18)