[Dshield] Scans on port 3659?

Andre Costa brblueser at uol.com.br
Sat Nov 9 16:32:16 GMT 2002


But would this explain why this box is probing port 3659 on remote
machines?

Best,

Andre

-- 
Andre Oliveira da Costa

On Fri, 8 Nov 2002 23:07:59 -0600
"Ed Truitt" <ed.truitt at etee2k.net> wrote:

> Actually, I configured my browser to use it as a proxy as a test - and
> it worked.  Don't know why, but there are *a lot* of open proxies out
> there.  I used to have one of them, but locked it down ASAP when I
> found out what you could do through an open proxy.
> 
> Cheers,
> Ed Truitt
> PGP fingerprint:  5368 D25E 468C A250 9833  CCD6 DBAE 9C25 02F9 0AB9
> http://www.etee2k.net
> http://www.bsatroop148.org
> 
> "Note to spammers:  my 'delete' key is connected to YOUR ISP.
>  Also, if you send me UCE, I reserve the right to post your spew
> on my Web site, with the appropriate color commentary, so that
> others may have a good laugh at your expense."
> 
> ----- Original Message -----
> From: "John Hardin" <johnh at aproposretail.com>
> To: "DShield mailing list" <list at dshield.org>
> Sent: Friday, November 08, 2002 6:13 PM
> Subject: Re: [Dshield] Scans on port 3659?
> 
> 
> > On Fri, 2002-11-08 at 12:46, Ed Truitt wrote:
> > > BTW, the only thing open on that IP (a DSL-connected in Brazil) is
> > > port
> 80 -
> > > checking for "index.html" produced a timeout, leading me to
> > > believe it
> may
> > > be an HTTP proxy server.
> >
> > or M$. Did you try "index.htm" ? :)




More information about the list mailing list