From owner-freebsd-security  Fri Nov 27 23:22:00 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id XAA13624
          for freebsd-security-outgoing; Fri, 27 Nov 1998 23:22:00 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from adelphi.physics.adelaide.edu.au (adelphi.physics.adelaide.edu.au [129.127.36.247])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA13619
          for <security@freebsd.org>; Fri, 27 Nov 1998 23:21:57 -0800 (PST)
          (envelope-from kkennawa@physics.adelaide.edu.au)
Received: from bragg (bragg [129.127.36.34])
	by adelphi.physics.adelaide.edu.au (8.8.8/8.8.8/UofA-1.5) with SMTP id RAA27897
	for <security@freebsd.org>; Sat, 28 Nov 1998 17:51:48 +1030 (CST)
Received: from localhost by bragg; (5.65/1.1.8.2/05Aug95-0227PM)
	id AA18390; Sat, 28 Nov 1998 17:51:47 +1030
Date: Sat, 28 Nov 1998 17:51:47 +1030 (CST)
From: Kris Kennaway <kkennawa@physics.adelaide.edu.au>
X-Sender: kkennawa@bragg
To: security@FreeBSD.ORG
Subject: Port 13223 scans?
Message-Id: <Pine.OSF.4.05.9811281749440.433-100000@bragg>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

What lives on port 13223? Over the past two weeks I've been getting numerous
probes from a certain subnet to this port. They seem to have taken a special
interest in me today (probed about a dozen times). I set up a listener on the
port and logged the following:

< 00000000 4f 50 4e 47 14 00 00 00 8c 4c 1b 00 d2 c3 1a 00 # OPNG.....L......
< 00000010 81 00 00 00                                     # ....

Look familiar to anyone?

Kris


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message