Security Incidents mailing list archives
Re: UDP Port 5140
From: Adam Young <adam () vbfx com>
Date: Thu, 15 Jan 2004 17:48:51 -0500
On Thu, 15 Jan 2004 15:34:22 +0100 lupe () lupe-christoph de (Lupe Christoph) wrote:
Hi! When looking for something unrelated I noticed that a PC at a client site tried to contact a machine it should not have business with ;-) 15:16:55.634036 192.168.96.188.1333 > bucp1-vip-m.blue.aol.com.5140: udp 1024
[...]
15:17:55.661894 192.168.96.188.alta-ana-lm > bucp1-vip-m.blue.aol.com.5140: udp 1024 15:18:05.662624 192.168.96.188.bbn-mmc > bucp1-vip-m.blue.aol.com.5140: udp 1024 15:18:05.665511 192.168.96.188.bbn-mmx bucp1-vip-m.blue.aol.com.5140: udp 1024 The PC is running Windows XP (dunno if Home or Prof) and it was attached to a WLAN at that time.
This is usually AIM (AOL Instant Messenger) connection traffic (at least on
5190), as far as I remember. Perhaps this 5140 is related in some fashion.
--
Adam Young <adam_at_vbfx_dot_com>
http://www.vbfx.com/
GPG Key - 5B3375F8
Attachment:
_bin
Description:
Current thread:
- UDP Port 5140 Lupe Christoph (Jan 15)
- Re: UDP Port 5140 Adam Young (Jan 19)
- Re: UDP Port 5140 Robin Sheat (Jan 19)
- Re: UDP Port 5140 Lupe Christoph (Jan 19)
- RE: UDP Port 5140 Dave Paris (Jan 19)
- Issue of AIM; was -> RE: UDP Port 5140 Harlan Carvey (Jan 19)
- RE: Issue of AIM; was -> RE: UDP Port 5140 Dave Paris (Jan 19)
- RE: UDP Port 5140 Dave Paris (Jan 19)
