Security Incidents mailing list archives
Ports 12345, 5742 and 20034
From: Artur.Nowak-incidents () WODIP OPOLE PL (Artur Nowak)
Date: Sat, 8 Jan 2000 22:58:53 +0100
Hi for all! Today I saw many probes of connections to three ports. I know that on the port 12345 usually is a trojan, but what someone try to find on the other ports? Thanks for any help. Jan 8 10:44:02 TCP: port 12345 connection attempt from mb-u03ip006.mbnet.fi:4602 Jan 8 10:44:02 TCP: port 5742 connection attempt from mb-u03ip006.mbnet.fi:4605 Jan 8 10:44:02 last message repeated 3 times Jan 8 10:44:04 TCP: port 12345 connection attempt from mb-u03ip006.mbnet.fi:4602 Jan 8 10:44:05 TCP: socks connection attempt from mb-u03ip006.mbnet.fi:4603 Jan 8 10:44:05 TCP: port 5742 connection attempt from mb-u03ip006.mbnet.fi:4605 Jan 8 10:44:05 TCP: port 20034 connection attempt from mb-u03ip006.mbnet.fi:4604 Jan 8 10:44:08 TCP: port 12345 connection attempt from mb-u03ip006.mbnet.fi:4602 Jan 8 10:44:08 TCP: port 5742 connection attempt from mb-u03ip006.mbnet.fi:4605 Jan 8 10:44:08 TCP: port 20034 connection attempt from mb-u03ip006.mbnet.fi:4604 Jan 8 10:44:11 TCP: port 12345 connection attempt from mb-u03ip006.mbnet.fi:4602 Jan 8 10:44:11 TCP: port 5742 connection attempt from mb-u03ip006.mbnet.fi:4605 Jan 8 10:44:11 TCP: port 20034 connection attempt from mb-u03ip006.mbnet.fi:4604 Jan 8 10:44:21 TCP: socks connection attempt from mb-u03ip006.mbnet.fi:4603 -- Artur Nowak ==> mail anowak-pgp () wodip opole pl for PGP pub_key e-mail : anowak () wodip opole pl || anowak () polo po opole pl www : www.wodip.opole.pl/~anowak/ || polo.po.opole.pl/~anowak/ PGP: 0x7BCE3064 | CF14 7AF4 2A1B 485E B0B5 1261 F7A1 26D5 7BCE 3064
Current thread:
- Distributed Scanning? Missouri FreeNet Administration (Jan 06)
- Ports 12345, 5742 and 20034 Artur Nowak (Jan 08)
- Re: Ports 12345, 5742 and 20034 Michal Rok (Jan 10)
- Re: Ports 12345, 5742 and 20034 Artur Nowak (Jan 11)
- Re: Ports 12345, 5742 and 20034 Michal Rok (Jan 10)
- Re: Distributed Scanning? Richard Bejtlich (Jan 08)
- Port 4 Arne Vidar Sjønøs (Jan 09)
- Re: Port 4 Keith Owens (Jan 10)
- Re: Port 4 Sean Sosik-Hamor (Jan 11)
- Re: Port 4 Philipp Buehler (Jan 11)
- Re: Port 4 Sean Sosik-Hamor (Jan 11)
- Re: Port 4 Boris Badenov (Jan 11)
- IRC-bots: what are they for ? Jens Hektor (Jan 12)
- Ports 12345, 5742 and 20034 Artur Nowak (Jan 08)