Security Incidents mailing list archives

Re: many port 4599 probes


From: Ulrich Eckhardt <Ulrich.Eckhardt () transcom de>
Date: Fri, 19 Oct 2001 15:46:08 +0200

Mike Tancsa wrote:

HylaFax makes use of this port.

         ---Mike

At 11:29 PM 10/18/2001 +0100, Alan Wright wrote:
4599 is an unassigned port according to the IANA ports list.

At 19:59 17/10/2001 +0545, you wrote:
My ipchains log shows that I received 85 attempted udp connections to port
4599 in just over 3 minutes, apparently from a host calling itself
shtam017085.netvigator.com (208.139.101.85).

The attempted connections came regularly every two seconds from
208.139.101.85:4599 -> my_address:4599

No, HylaFAX uses 4559/TCP

Uli 
-- 
Ulrich Eckhardt                         Tr@nscom  
http://www.uli-eckhardt.de              http://www.transcom.de
                                        Lagerstraße 11-15 A8
                                        64807 Dieburg Germany

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: