Re: Unusual proxy port scan

From: James Sneeringer (james+incidentsat_private)
Date: Tue Jun 25 2002 - 21:20:55 PDT

Next message: Jensenne Roculan: "Dead Thread - Backdoor"

Previous message: Paul Gear: "Am i compromised?"
In reply to: Bill Royds: "RE: Unusual proxy port scan"
Next in thread: Jim Harrison (SPG): "RE: Unusual proxy port scan"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sun, Jun 23, 2002 at 03:42:47PM -0400, Bill Royds wrote:
| Port 3389 is used by Microsoft Terminal Server and 1813 is used by
| Radius (normally as UDP)

RADIUS uses udp exclusively.  If it's tcp/1813, it's something else.

-James


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Jensenne Roculan: "Dead Thread - Backdoor"
Previous message: Paul Gear: "Am i compromised?"
In reply to: Bill Royds: "RE: Unusual proxy port scan"
Next in thread: Jim Harrison (SPG): "RE: Unusual proxy port scan"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Jun 26 2002 - 18:56:12 PDT