Security Incidents: RE: Port 3889 Traffic

["Rob Shein" <shoten () starpower net>]

Fport will only tell him what local apps are using a port.  In his case,
he's seeing traffic originating from the outside, which is being dropped by
his firewall.

> -----Original Message-----
> From: Francisco J. Pecorella R. 
> [mailto:francisco.pecorella () cantv net] 
> Sent: Monday, May 10, 2004 12:02 PM
> To: incidents () securityfocus com
> Subject: Re: Port 3889 Traffic
>
>
> I am not really sure what application by default uses port 3889.
>
> At http://www.iana.org/assignments/port-numbers
>
> itv-control     3899/tcp   ITV Port
> itv-control     3899/udp   ITV Port
>
> I recomend that you use fport at X.X.X.X. This software 
> permit to know what application is opening a specific port.
>
> --
> Best Regards
>
> ----- Original Message ----- 
> From: <Josh.Berry () compucom com>
> To: <incidents () securityfocus com>
> Sent: Monday, May 10, 2004 11:30 AM
> Subject: RE: Port 3889 Traffic
>
>
> > Terminal Services is port 3389, not really sure what port 
> 3889 is used 
> > for.
> >
> > -----Original Message-----
> > From: kang [mailto:kang () insecure ws]
> > Sent: Monday, May 10, 2004 9:59 AM
> > To: incidents () securityfocus com
> > Subject: Re: Port 3889 Traffic
> >
> > Eric Ceradsky wrote:
> > > I've been seeing a lot of port 3889 traffic externally lately but 
> > > haven't been able to dig up any known issues with that 
> port.. Used 
> > > to be one address and overnight tis quickly spawned to several. 
> > > Brazil, US, UK, etc. Anyone have any ideas?
> > that's Terminal Server, or Remote Desktop, on Windows.
> > An utility to take a visual remote control of a computer.
> ----------------------------------------------------------------------
> > --
> > ---
> --------------------------------------------------------------
> ----------
> > ----
> ----------------------------------------------------------------------
> > ----
> -
> >
> ----------------------------------------------------------------------
> > ----
> --
> >
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> --------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------