Security Incidents mailing list archives

Re: scans for port 4000 udp

From: "Young, Mike" <Mike.Young () US ORIGIN-IT COM>
Date: Wed, 29 Nov 2000 10:36:23 -0500

The default port for CircleMUD is 4000.

Maybe they were scanning for MUDs.

Mike.

        -----Original Message-----
        From:   Jens Hektor [SMTP:hektor () RZ RWTH-AACHEN DE]
        Sent:   Tuesday, November 28, 2000 3:40 AM
        To:     INCIDENTS () SECURITYFOCUS COM
        Subject:        Re: scans for port 4000 udp

        > Anyone have any idea what they are looking for?

        Maybe an exploit for ICQ ? Port characteristics
        matches that.

        Are the dots in your ASCII dump binary data ?

        Jens

Current thread:

scans for port 4000 udp Russell Fulton (Nov 28)
- <Possible follow-ups>
- Re: scans for port 4000 udp Jens Hektor (Nov 29)
  - Re: scans for port 4000 udp Glen Boyd (Nov 30)
- Re: scans for port 4000 udp Young, Mike (Nov 30)