Security Incidents: Re: many port 4599 probes

[Ulrich Eckhardt <Ulrich.Eckhardt () transcom de>]

Mike Tancsa wrote:
> HylaFax makes use of this port.
>
>          ---Mike
>
> At 11:29 PM 10/18/2001 +0100, Alan Wright wrote:
> > 4599 is an unassigned port according to the IANA ports list.
> >
> > At 19:59 17/10/2001 +0545, you wrote:
> > > My ipchains log shows that I received 85 attempted udp connections to port
> > > 4599 in just over 3 minutes, apparently from a host calling itself
> > > shtam017085.netvigator.com (208.139.101.85).
> > >
> > > The attempted connections came regularly every two seconds from
> > > 208.139.101.85:4599 -> my_address:4599
No, HylaFAX uses 4559/TCP

Uli 
-- 
Ulrich Eckhardt                         Tr () nscom  
http://www.uli-eckhardt.de              http://www.transcom.de
                                        Lagerstraße 11-15 A8
                                        64807 Dieburg Germany

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com