mailing list archives
RE: Strange Connection Attempts
From: "Keith T. Morgan" <keith.morgan () terradon com>
Date: Sat, 15 Feb 2003 01:23:22 -0500
Yeah. We've seen these as well. Ours came packed with a portscan for port 23, 67 (TCP) 1756, tcp 6112, and tcp 9001.
We've also seen a marked increase in scans for tcp port 3389 (ms terminal services). Additionally, we've seen some odd
scans for tcp 17300.
I haven't taken the time yet to see what runs on 17300 tcp.
From: Hankes, Christopher A [mailto:Christopher.A.Hankes () uwsp edu]
Sent: Friday, February 14, 2003 1:05 PM
Cc: security-basics () securityfocus com
Subject: Strange Connection Attempts
As of about 2:00 am cst 2/14/03 I have been receiving connection
attempts on my router to port 1756(caplast-lmd). Has any one seen this
too? Are there any know vulnerabilities on that port? I have been
getting a connection attempt about every 10-15 seconds. It's
a DoS attack. Anyone have any thoughts.=20
University of Wisconsin -Stevens Point