Re: Not pulling the plug

[rmilner () AOC NRAO EDU (Ruth Milner)]

Stephen Friedl <friedl () MTNDEW COM> wrote:

> a scan for TCP port 5 (what's this?)

IANA says it's RJE (remote job entry - an IBM mainframe-type protocol,
I believe). But this seems like an unlikely candidate for an exploit;
it probably isn't very widely used any more. Maybe the intruder made
a typo? :-} Or maybe something else uses that port more commonly, though
the very-low-numbered ports tend to have fewer of these conflicts.

Ruth.

----
Ruth Milner                             NRAO                 Socorro NM
Assistant to the Director -       rmilner () nrao edu          505-835-7282
  Computing                                             FAX 505-835-7027