[lug] new port?

[Sexton, George]

It's someone trolling for a Back Orifice Daemon running on your machine.

-----Original Message-----
From: lug-admin at lug.boulder.co.us [mailto:lug-admin at lug.boulder.co.us]On
Behalf Of Jeff
Sent: 19 November, 2001 1:56 AM
To: lug at lug.boulder.co.us
Subject: Re: [lug] new port?


Oops, copied the wrong line...sorry.  Here's the real line:


Nov 19 03:21:14 c1234567-a kernel: Packet log: input DENY eth0 PROTO=6
61.79.156.104:2790 24.xx.xxx.xxx:12345 L=48 S=0x00 I=18323 F=0x4000
T=111 SYN (#10)

Sorry about that.  Does anybody know what port 12345 is?

Paul Walmsley wrote:
> 
> On Sun, 18 Nov 2001, Jeff wrote:
> 
> > -- Nov 18 21:03:39 c1234567-a kernel: Packet log: input DENY eth0
> > PROTO=6 24.22.172.43:4583 24.xx.xxx.xxx:80 L=48 S=0x00 I=37155 F=0x4000
> > T=125 SYN (#24)
> >
> > Does anybody know what this is???  Thanks.
> 
> ... someone trying to access an HTTP server on your box?
> 
> $ egrep ' 80/tcp' /etc/services
> http             80/tcp    World Wide Web HTTP
> www              80/tcp    World Wide Web HTTP
> www-http         80/tcp    World Wide Web HTTP
> 
> - Paul
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug

-- 
"Yet they are mistaken, they will be exposed, and they will discover
what
others in the past have learned;  Those who make war against the United 
States have chosen their own destruction."
G. Bush Jr.  Sept '01
_______________________________________________
Web Page:  http://lug.boulder.co.us
Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug