From owner-freebsd-questions Tue Nov 24 08:09:18 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA06156 for freebsd-questions-outgoing; Tue, 24 Nov 1998 08:09:18 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from picketfence.suburbs.net (picketfence.suburbs.net [204.107.76.16]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id IAA06147 for ; Tue, 24 Nov 1998 08:09:15 -0800 (PST) (envelope-from vinnie@picketfence.suburbs.net) Received: (qmail 15672 invoked by uid 1000); 24 Nov 1998 16:12:25 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 24 Nov 1998 16:12:25 -0000 Date: Tue, 24 Nov 1998 11:12:25 -0500 (EST) From: Vinnie Yesue To: "Stephen C. Comoletti" cc: "freebsd-questions@FreeBSD.ORG" Subject: Re: udp port 31337 In-Reply-To: <365AD7D7.AD76E051@delanet.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 24 Nov 1998, Stephen C. Comoletti wrote: > Just curious, what is udp port 31337 for? It's not in my /etc/services at all > and I got someone steadily pounding away at it on my new 3.0 box. They have not > gotten in or done any damage, just spammed my logs is all. the backoriface windows NT backdoor/trojan/whatever runs on port 31337, along with other hacker-related stuff. if I saw a lot of activity on 31337 I would see where it was coming from and try and figure out if any of the machines on my network were compromised. vinnie To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message