I am getting a whole series of probes on port 13139 all of a sudden in my firewall log. This started out of the blue about 6 days ago. There will be a string of them coming from a multitude of different IP addresses within a matter of seconds (I would imagine spoofing of the IPs from nmap or a similar tool). Of course the SuSE firewall2 is dropping all of them, but they continue. Has anyone else seen this happen recently. Is there a new attack of some sort which is directed to port 13139? I have never noticed this specific port before with so many hits and now it is starting to rival the old nimba entries in my logs. Thanks, Jim
* James Bliss; <bliss@attbi.com> on 16 Feb, 2002 wrote:
I am getting a whole series of probes on port 13139 all of a sudden in my firewall log. This started out of the blue about 6 days ago. There will be a string of them coming from a multitude of different IP addresses within a matter of seconds (I would imagine spoofing of the IPs from nmap or a similar tool).
Although it has not reached here port 13139 and protocol what tcp udp ? -- Togan Muftuoglu
Sorry, the protocol is UDP. 02/16/02 02:49:18 PM, Togan Muftuoglu <toganm@dinamizm.com> wrote:
* James Bliss; <bliss@attbi.com> on 16 Feb, 2002 wrote:
I am getting a whole series of probes on port 13139 all of a sudden in my firewall log. This started out of the blue about 6 days ago. There will be a string of them coming from a multitude of different IP addresses within a matter of seconds (I would imagine spoofing of the IPs from nmap or a similar tool).
Although it has not reached here port 13139 and protocol what tcp udp ?
-- Togan Muftuoglu
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com
* James Bliss; <bliss@attbi.com> on 16 Feb, 2002 wrote:
Sorry, the protocol is UDP.
Well a quick look into the ports database shown nothing incidents.org does have logged activity yet it is not major at least you are not alone -:) I will recheck my logs but quite positive that it was not logged here -- Togan Muftuoglu
participants (2)
-
James Bliss
-
Togan Muftuoglu