Security Incidents: RE: Port 3889 Traffic

[<Josh.Berry () compucom com>]

Terminal Services is port 3389, not really sure what port 3889 is used
for.

-----Original Message-----
From: kang [mailto:kang () insecure ws] 
Sent: Monday, May 10, 2004 9:59 AM
To: incidents () securityfocus com
Subject: Re: Port 3889 Traffic

Eric Ceradsky wrote:
> I've been seeing a lot of port 3889 traffic externally
> lately but haven't been able to dig up any known
> issues with that port.. Used to be one address and
> overnight tis quickly spawned to several. Brazil, US,
> UK, etc. Anyone have any ideas?
that's Terminal Server, or Remote Desktop, on Windows.
An utility to take a visual remote control of a computer.


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----




---------------------------------------------------------------------------
----------------------------------------------------------------------------