From owner-freebsd-security Mon Nov 8 5:47: 4 1999 Delivered-To: freebsd-security@freebsd.org Received: from pegasus.cc.ucf.edu (Pegasus.cc.ucf.edu [132.170.240.30]) by hub.freebsd.org (Postfix) with ESMTP id 66C3614F10 for ; Mon, 8 Nov 1999 05:46:59 -0800 (PST) (envelope-from ewayte@pegasus.cc.ucf.edu) Received: from pegasus.cc.ucf.edu (pegasus.cc.ucf.edu [132.170.240.30]) Ident [ewayte] by pegasus.cc.ucf.edu (Postfix) with ESMTP id 96C883428; Mon, 8 Nov 1999 08:46:57 -0500 (EST) Date: Mon, 8 Nov 1999 08:46:57 -0500 (EST) From: Eric Wayte To: Ian Smith Cc: security@freebsd.org Subject: Re: Port 1243 scans In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org A complete list of assigned port numbers can be found at: http://www.faqs.org/rfcs/rfc1700.html ftp://ftp.isi.edu/in-notes/iana/assignments/port-numbers It appears that 1243 is unassigned. Good luck, Eric Wayte, DBA Univ. of Central Florida ewayte@pegasus.cc.ucf.edu On Mon, 8 Nov 1999, Ian Smith wrote: > Date: Mon, 8 Nov 1999 22:43:48 +1100 (EST) > From: Ian Smith > To: security@freebsd.org > Subject: Port 1243 scans > > Hi folks, > > The last two days we've had several attempted scans of tcp port 1243 > from two systems in our locality, presumably over our /26 subnet. This > seems to be their only port of interest; I only noticed it due to their > having scanned unallocated addresses to which ipfw logs access attempts. > > What are they looking for? Is this one of these Netbus/BO things? We do > have Windoze boxes on the LAN, as some with local knowledge would know; > I guess I'll have to bolt down ports that wouldn't worry freebsd boxes. > > To save asking more silly questions, is there a list of ports used by > various nasties somewhere out there (not in /etc/services, obviously). > > If it matters, this is a 2.2.6-RELEASE box with known security fixes, > soon to be upgraded to 3.3, once the airmail arrives. > > Cheers, Ian > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message