Date: Mon, 8 Nov 1999 22:43:48 +1100 (EST) From: Ian Smith <smithi@nimnet.asn.au> To: security@freebsd.org Subject: Port 1243 scans Message-ID: <Pine.BSF.3.96.991108222201.2364B-100000@gaia.nimnet.asn.au>
next in thread | raw e-mail | index | archive | help
Hi folks, The last two days we've had several attempted scans of tcp port 1243 from two systems in our locality, presumably over our /26 subnet. This seems to be their only port of interest; I only noticed it due to their having scanned unallocated addresses to which ipfw logs access attempts. What are they looking for? Is this one of these Netbus/BO things? We do have Windoze boxes on the LAN, as some with local knowledge would know; I guess I'll have to bolt down ports that wouldn't worry freebsd boxes. To save asking more silly questions, is there a list of ports used by various nasties somewhere out there (not in /etc/services, obviously). If it matters, this is a 2.2.6-RELEASE box with known security fixes, soon to be upgraded to 3.3, once the airmail arrives. Cheers, Ian To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.991108222201.2364B-100000>