[unisog] Port 39999 scans

Joe Matusiewicz joem at nist.gov
Thu Nov 29 17:56:40 GMT 2001


At 09:53 AM 11/29/01, Stephen Tihor wrote:
>Anyone started seeing port 39999 scans from 202.79.125.0/24?   Its not on my
>well know trojan horse list.


I haven't seen them from that particular address but from others.  Port 
39999 is a backdoor port for one the crc32 compensation attacks.

-- Joe



More information about the unisog mailing list