Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Security Incidents: Re: unknown port numbers

Re: unknown port numbers

From: Kovacs Andrei <andik_at_DEC.COM.RO>
Date: Thu, 2 Mar 2000 11:02:16 +0200

On Tue, 29 Feb 2000, Rolandas Juodzbalis wrote:

> Where on the net, I can find port<->program(trojan,etc) description?
> There is some strange connection log to my system:
>
> Feb 19 18:44:18 TCP: port 28744 connection attempt from *.*.*.*:62757
> Feb 19 18:44:36 TCP: port 52252 connection attempt from *.*.*.*:62758
> Feb 19 18:45:06 TCP: port 15505 connection attempt from *.*.*.*:62759
> Feb 19 18:45:30 TCP: port 17262 connection attempt from *.*.*.*:62760
> Feb 19 18:48:16 TCP: port 41316 connection attempt from *.*.*.*:62762
>

Ports over 61000 are usually used on Linux machines running IP Masquerade, so
my guess is that someone behind a Linux Masquerade Proxy portscanned you.

Kovacs Andrei
Received on Mar 01 2000

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos