[lug] UDP Port 515

D. Stimits stimits at idcomm.com
Wed Mar 7 11:50:19 MST 2001


"Scott A. Herod" wrote:
> 
> Yep.  See http://www.cert.org/tech_tips/packet_filtering.html

TCP is rlogin, but UDP is the "who" daemon. It sounds like someone is
looking for account names to attempt rlogin with.

D. Stimits, stimits at idcomm.com

> 
> Scott
> 
> "Atkinson, Chip" wrote:
> >
> > Is that the rlogin port?
> >
> > > -----Original Message-----
> > > From: Stephen G. Smith [mailto:ss2chef at hotmail.com]
> > > Sent: Wednesday, March 07, 2001 11:28 AM
> > > To: lug at lug.boulder.co.us
> > > Subject: [lug] UDP Port 515
> > >
> > >
> > > A host on my upstream is doing a scan to UDP port 513 every
> > > 3 minutes..
> > >
> > > What is he looking for?
> > > the scans are blocked but am wondering why that port?
> > >
> > > SGS
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug



More information about the LUG mailing list