At 10:11 PM 10/11/2000 -0800, Ethan Benson wrote:

>Does anyone know what port 13223 is?  today i have been getting a
>massive number of connection attempts to that port from several
>different addresses.

According to this page:

http://www.sans.org/newlook/resources/IDFAQ/oddports.htm

It is also used by the Hack 99 keylogger.

I am currently being scanned by an @home proxy server for back orifice 2K. 
I find it absolutely hilarious.

Oct 11 21:36:20 gw portsentry[24302]: attackalert: Connect from host: 
proxy2-external.tulsa1.ok.home.com/24.4.254.197 to TCP port: 54320

Tom White
Tulsa, OK


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to