Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 25 Jul 2000 09:41:34 +0200 (MET DST)
From:      =?ISO-8859-1?Q?P=E4r_Thoren?= <t98pth@student.hk-r.se>
To:        Stephen Hocking <shocking@houston.rr.com>
Cc:        security@freebsd.org, sage-au@sage-au.org.au
Subject:   Re: Script kiddies and their port scans
Message-ID:  <Pine.GSO.4.21.0007250924480.14065-100000@orc.rby.hk-r.se>
In-Reply-To: <200007242314.SAA01912@bloop.craftncomp.com>

index | next in thread | previous in thread | raw e-mail


On Mon, 24 Jul 2000, Stephen Hocking wrote:

> Checking the firewall logs I see various attempts to connect to rather unusual 
> ports on my box - does anyone now what the following are?
> 
> 
> 27374
> 
> 1243
> 
> 98 - This comes up as TACNEWS in /etc/services


I have at least 4-5 of these scans for port 98 a week.

At least now I know it´s linuxconf they are sniffing for.

/ Pär



> 
> 143 imap2
> 
> Are the two unknown ones some BackOrifice port or part of the common backdoors 
> left behind by these twerps?
> 
> 
> 	Stephen
> -- 
>   The views expressed above are not those of PGS Tensor.
> 
>     "We've heard that a million monkeys at a million keyboards could produce
>      the Complete Works of Shakespeare; now, thanks to the Internet, we know
>      this is not true."            Robert Wilensky, University of California
> 
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.21.0007250924480.14065-100000>