[lug] funny port numbers

[Alan Robertson]

Hi,

I decided to look at the logs of the various ways people have tried to break
into my firewall.  I know about many of the ports, and even some of the
exploits, but I'm at a loss for some of them.

At the end of this email is a list of counts and port numbers.  The
mysteries to me include:
	Ports 61K and up
	Port 1243
	Port 6970
	Port 27374.

Does anyone know what these particular ports/exploits are about?

Also, what is microsoft-ds on port 445?

	-- Alan Robertson
	   alanr at unix.sh



      7 500     isakmp       500/tcp   # isakmp
      7 64478
      8 65030
      9 445     microsoft-ds 445/udp   # Microsoft-DS
      9 62059
      9 63751
      9 64168
     11 64564
     12 62500
     12 62726
     12 63324
     12 64183
     14 64045
     16 62402
     16 64555
     19 63834
     27 61144
     37 1243
     48 21      ftp           21/tcp # File Transfer [Control]
     49 515     printer      515/tcp # spooler
     76 53      DNS
    103 27374
    179 111     sunrpc       111/tcp # SUN Remote Procedure Call
    485 6970
    562 139     netbios-ssn  139/tcp # NETBIOS Session Service
    686 137     netbios-ns   137/tcp # NETBIOS Name Service