Re: many port 4599 probes

From: Ulrich Eckhardt (Ulrich.Eckhardtat_private)
Date: Fri Oct 19 2001 - 06:46:08 PDT

  • Next message: Kelley, John: "RE: Trojan program"

    Mike Tancsa wrote:
    > 
    > HylaFax makes use of this port.
    > 
    >          ---Mike
    > 
    > At 11:29 PM 10/18/2001 +0100, Alan Wright wrote:
    > >4599 is an unassigned port according to the IANA ports list.
    > >
    > >At 19:59 17/10/2001 +0545, you wrote:
    > >>My ipchains log shows that I received 85 attempted udp connections to port
    > >>4599 in just over 3 minutes, apparently from a host calling itself
    > >>shtam017085.netvigator.com (208.139.101.85).
    > >>
    > >>The attempted connections came regularly every two seconds from
    > >>208.139.101.85:4599 -> my_address:4599
    
    No, HylaFAX uses 4559/TCP
    
    Uli 
    -- 
    Ulrich Eckhardt                         Tr@nscom  
    http://www.uli-eckhardt.de              http://www.transcom.de
                                            Lagerstraße 11-15 A8
                                            64807 Dieburg Germany
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Fri Oct 19 2001 - 08:43:05 PDT