Firewall Wizards mailing list archives

Re: UDP: port 31790 -> 31789


From: Robert Graham <robert_david_graham () yahoo com>
Date: Tue, 16 Nov 1999 17:33:37 -0800 (PST)

This is a scan for the Hack-a-Tack trojan.

http://www.robertgraham.com/pubs/firewall-seen.html#port31789

--- Jan Stifter <j.stifter () medres ch> wrote:
hello all,
our firewall logs a lot of packets, coming in from port 31790 to port 31789,
udp protocol. it seems to be a quite usual scan attack. has anybody
encountered anything equal or can anybody explain to me, what kind of
software the possible attacker is expecting at port 31789?

any hints are greatly appreciated

jan stifter
medres ag





=====
Robert Graham
"Anxiously awaiting the millenium so I can start programming
dates with 2-digits again."
__________________________________________________
Do You Yahoo!?
Bid and sell for free at http://auctions.yahoo.com



Current thread: