Date: Wed, 26 Jul 2000 14:43:01 +0200 (CEST) From: Jens Kerle <jkerle@gmx.de> To: Nick Loman <nick@loman.net> Cc: security@FreeBSD.ORG Subject: Re: Script kiddies and their port scans Message-ID: <Pine.LNX.4.10.10007261441040.15914-100000@abyss.stuwo.de> In-Reply-To: <Pine.BSF.4.21.0007250017100.48192-100000@slip.csosl.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 25 Jul 2000, Nick Loman wrote: > On Mon, 24 Jul 2000, Stephen Hocking wrote: > > > Checking the firewall logs I see various attempts to connect to rather unusual > > ports on my box - does anyone now what the following are? > > > > > > 27374 > > > > 1243 > > > > 98 - This comes up as TACNEWS in /etc/services > > > > 143 imap2 > > > > Are the two unknown ones some BackOrifice port or part of the common backdoors > > left behind by these twerps? > > I have a similar question, but the port I saw was 1236 > > /etc/services says: rmtcfg 1236/tcp # Gracilis Packeten remote config > server > > (though I obviously don't run any such thing) > > Nick. > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > http://www.robertgraham.com/pubs/firewall-seen.html SubSeven scans i have them evey 10 min on my dial in fw log what now ? Ignore them ? Mfg, Jens To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.10.10007261441040.15914-100000>