-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Check out this link: http://online.securityfocus.com/archive/75/299560/2002-11-10/2002-11-16/0 Vince Hillier vdhat_private http://plutonium.homeunix.com - - -----Original Message----- From: Ingersoll, Jared [mailto:jaredat_private] Sent: Tuesday, November 12, 2002 5:01 AM To: incidentsat_private Subject: scans on port 57 I'm seeing a lot of blocked scans on port 57 in my firewall logs, many times in conjunction with a port 80 or port 21 scan. I was working under the assumption that these were related to a misconfigured port scanner, but I'm seeing them from a pretty diverse set of source addresses, so now I'm curious what they're looking for. jared - - ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com -----BEGIN PGP SIGNATURE----- Version: PGP 8.0 (Build 349) Beta iQA/AwUBPdJO7EBtW3tWqkVxEQKLyACgr4f83aUkLAQYJSx/D4ZgCHorHG8AoJkL 3FsYVQmy7cuVYGMEtloZ6b9a =hcAy -----END PGP SIGNATURE----- ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Wed Nov 13 2002 - 17:08:12 PST