Security Incidents mailing list archives

Ports 12345, 5742 and 20034


From: Artur.Nowak-incidents () WODIP OPOLE PL (Artur Nowak)
Date: Sat, 8 Jan 2000 22:58:53 +0100


Hi for all!

Today I saw many probes of connections to three ports. I know that on
the port 12345 usually is a trojan, but what someone try to find on the
other ports?

Thanks for any help.

Jan  8 10:44:02 TCP: port 12345 connection attempt from mb-u03ip006.mbnet.fi:4602
Jan  8 10:44:02 TCP: port 5742 connection attempt from mb-u03ip006.mbnet.fi:4605
Jan  8 10:44:02 last message repeated 3 times
Jan  8 10:44:04 TCP: port 12345 connection attempt from mb-u03ip006.mbnet.fi:4602
Jan  8 10:44:05 TCP: socks connection attempt from mb-u03ip006.mbnet.fi:4603
Jan  8 10:44:05 TCP: port 5742 connection attempt from mb-u03ip006.mbnet.fi:4605
Jan  8 10:44:05 TCP: port 20034 connection attempt from mb-u03ip006.mbnet.fi:4604
Jan  8 10:44:08 TCP: port 12345 connection attempt from mb-u03ip006.mbnet.fi:4602
Jan  8 10:44:08 TCP: port 5742 connection attempt from mb-u03ip006.mbnet.fi:4605
Jan  8 10:44:08 TCP: port 20034 connection attempt from mb-u03ip006.mbnet.fi:4604
Jan  8 10:44:11 TCP: port 12345 connection attempt from mb-u03ip006.mbnet.fi:4602
Jan  8 10:44:11 TCP: port 5742 connection attempt from mb-u03ip006.mbnet.fi:4605
Jan  8 10:44:11 TCP: port 20034 connection attempt from mb-u03ip006.mbnet.fi:4604
Jan  8 10:44:21 TCP: socks connection attempt from mb-u03ip006.mbnet.fi:4603

--
 Artur Nowak       ==> mail anowak-pgp () wodip opole pl for PGP pub_key
  e-mail : anowak () wodip opole pl       || anowak () polo po opole pl
  www    : www.wodip.opole.pl/~anowak/ || polo.po.opole.pl/~anowak/
 PGP: 0x7BCE3064 | CF14 7AF4 2A1B 485E B0B5 1261 F7A1 26D5 7BCE 3064



Current thread: