Re: port 50000

[David Fifield <david () bamsoftware com>]

On Tue, May 04, 2010 at 01:43:41PM -0500, flacman Cuteam wrote:
> Internet/Intranet Input Method Server Framework... yes david, 523 is
> the ibm DAS (admin) port, but the default "database" port is 50000
>
> sans institute talks about a trojan and ibm-db2 in this port:
> http://isc.sans.org/port.html?port=50000
>
> I "scan the internet" nmap -iR 50000 -p50000 -sV and just find 13
> hosts with this port open and have IBM-db2 (love iR option :P) and
> other 3 with a tcp-wrapper.
>
> and i really can't find much info about iiimsf when i google "port 50000"

Okay, I think that's pretty good evidence. I changed the name to
ibm-db2.

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/