Security Incidents mailing list archives

Re: UDP Port 5140


From: Adam Young <adam () vbfx com>
Date: Thu, 15 Jan 2004 17:48:51 -0500

On Thu, 15 Jan 2004 15:34:22 +0100
lupe () lupe-christoph de (Lupe Christoph) wrote:



Hi!

When looking for something unrelated I noticed that a PC at a client
site tried to contact a machine it should not have business with ;-)

15:16:55.634036 192.168.96.188.1333 > bucp1-vip-m.blue.aol.com.5140: udp 1024
[...]
15:17:55.661894 192.168.96.188.alta-ana-lm > bucp1-vip-m.blue.aol.com.5140:
udp 1024 15:18:05.662624 192.168.96.188.bbn-mmc >
bucp1-vip-m.blue.aol.com.5140: udp 1024 15:18:05.665511 192.168.96.188.bbn-mmx
bucp1-vip-m.blue.aol.com.5140: udp 1024

The PC is running Windows XP (dunno if Home or Prof) and it was attached
to a WLAN at that time.


This is usually AIM (AOL Instant Messenger) connection traffic (at least on
5190), as far as I remember.  Perhaps this 5140 is related in some fashion.

-- 
    Adam Young  <adam_at_vbfx_dot_com>
    http://www.vbfx.com/
    GPG Key - 5B3375F8

Attachment: _bin
Description:


Current thread: