[SLE] What's on ports 1015 & 1016?
Few minutes ago I was being port scanned on these two ports in a rapid succession, although both TCP wrappers and portsentry took care of business, I would like to know what are these two ports. I could not find any reference to them. Thanks, Avi -- Avi Schwartz Get a Life avi@CFFtechnologies.com Get Linux -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
/etc/services should contain a list of prt numbers and their associated
services.
----- Original Message -----
From: "Avi Schwartz"
Few minutes ago I was being port scanned on these two ports in a rapid succession, although both TCP wrappers and portsentry took care of business, I would like to know what are these two ports. I could not find any reference to them.
Thanks, Avi -- Avi Schwartz Get a Life avi@CFFtechnologies.com Get Linux
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
Avi Schwartz said:
Few minutes ago I was being port scanned on these two ports in a rapid succession, although both TCP wrappers and portsentry took care of business, I would like to know what are these two ports. I could not find any reference to them.
What do you have listening on those ports? A 'netstat -ln' doesn't show anything running here, and there's nothing listed in /etc/services either. I even checked rfc1700 ( http://www.faqs.org/rfcs/rfc1700.html ) and didn't see anything listed there. -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
On Sun, 02 Jan 2000, Avi Schwartz wrote:
Few minutes ago I was being port scanned on these two ports in a rapid succession, although both TCP wrappers and portsentry took care of business, I would like to know what are these two ports. I could not find any reference to them.
Thanks, Avi -- Avi Schwartz Get a Life
It may have nothing to do with you really. A lot of looser windows hacker tools like Back Orafice allow the perpetrators to choose the ports they use to install trojans on. They usually also include a simple scanning tool to then find those hosts. So if you are in a range they are searching you can get scanned. They do this so that they can install trojans on machines with dynamic IPs. This is good to know if you support windows machines it's something you can keep an eye on. There are many explanations for the scan, and this is only one. If you do determine a definate answer I would be interested in hearing it. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Darren R. Weber drw@linuxfan.com ICQ# 2849193 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
participants (4)
-
avi＠CFFtechnologies.com -
jmgrant＠primenet.com -
nagash＠ozemail.com.au -
weberdr＠bellsouth.net