Security Incidents mailing list archives

Re: TCP port 5000 syn increasing


From: "Leonardo" <lmuroya () uol com br>
Date: Mon, 17 May 2004 17:00:03 -0300

http://isc.sans.org/port_details.php?port=5000


----- Original Message ----- 
From: "Rohny Jotton" <rohnyjotton () hotmail com>
To: <incidents () securityfocus com>
Sent: Sunday, May 16, 2004 9:49 PM
Subject: TCP port 5000 syn increasing


I'm seeing a large amount of these attempts starting around 1:00 PM EST
Sunday. They're getting blocked at the edge so I don't have any more info
than that. I'm seeing about one a second from various hosts/networks.

isc.sans.org shows that port related to various backdoors. Someone or
something is getting busy.

_________________________________________________________________
MSN Toolbar provides one-click access to Hotmail from any Web page - FREE
download! http://toolbar.msn.click-url.com/go/onm00200413ave/direct/01/


--------------------------------------------------------------------------
-
--------------------------------------------------------------------------
--



---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: