Date: Tue, 25 Jul 2000 00:18:10 +0100 (BST) From: "Nick Loman" <nick@loman.net> To: security@freebsd.org Subject: Re: Script kiddies and their port scans Message-ID: <Pine.BSF.4.21.0007250017100.48192-100000@slip.csosl.co.uk> In-Reply-To: <200007242314.SAA01912@bloop.craftncomp.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 24 Jul 2000, Stephen Hocking wrote: > Checking the firewall logs I see various attempts to connect to rather unusual > ports on my box - does anyone now what the following are? > > > 27374 > > 1243 > > 98 - This comes up as TACNEWS in /etc/services > > 143 imap2 > > Are the two unknown ones some BackOrifice port or part of the common backdoors > left behind by these twerps? I have a similar question, but the port I saw was 1236 /etc/services says: rmtcfg 1236/tcp # Gracilis Packeten remote config server (though I obviously don't run any such thing) Nick. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0007250017100.48192-100000>