Security Incidents mailing list archives

Port 1033-1037 Question


From: Don Tansey <hyghlander () MINDSPRING COM>
Date: Fri, 2 Feb 2001 21:48:56 -0500

<Moderator: My aplologies if this is not appropriate to
the list. Please do not post if
this is the case>

Does anyone knowof a trojan that tries to initiate a
connection from port 1033-1037 on the infected
machine to an outside POP3 mail server?

My mail client is blocked from connecting
to my ISP's mail server at port 80 from the
source port range shown above.

My firewall logs show nothing beyond the source
port and the destination port.

Thanks,

Don Tansey


--Beware the fury of a patient man.


Current thread: