RE: Abnormal activity.

[Michael Carroll <carrollm () wclc com>]

If you ever wanted to know what service/application is linked to a port, you
can use these links to help...note, these are not the only resources, but by
far, the easiest and IMO, most useful:

http://isc.incidents.org/  (and type in the port # and query away)

http://www.chebucto.ns.ca/~rakerman/trojan-port-table.html

http://www.simovits.com/trojans/trojans.html

Good luck.

M

-----Original Message-----
From: Stefan Dengscherz [mailto:sd () lostdns net]
Sent: Thursday, April 01, 2004 11:57 AM
To: security-basics () securityfocus com
Subject: Re: Abnormal activity.


Hello Brendan,

port 4662 is used by the well known p2p application Edonkey. so if you have
a dynamic ip for example it is quite likely that other users try to connect.

cheers,

  Stefan Dengscherz
  http://www.lostdns.net/

On Thu, 1 Apr 2004 19:00:57 +1000
"Brendan Halliday" <guardmasta () froggy com au> wrote:

> Evening,
>
> I may just be oversensitive, but is anyone here receiving mass amounts
> of connection requests on port 4662?
>
> If not, could someone point me to some documentation of what is
> happening?
>
> Cheers,
> Brendan Halliday AKA p0m, Guardmasta, Maero, Dwervan
> Network Engineer\Analyst\Administrator\Security Consultant in Training
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.631 / Virus Database: 404 - Release Date: 17/03/2004
>  
---------------------------------------------------------------------------
> Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off

> any course! All of our class sizes are guaranteed to be 10 students or
less 
> to facilitate one-on-one interaction with one of our expert instructors. 
> Attend a course taught by an expert instructor with years of in-the-field 
> pen testing experience in our state of the art hacking lab. Master the
skills 
> of an Ethical Hacker to better assess the security of your organization. 
> Visit us at: 
> http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------
>

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------