[Dshield] Ports 8, 21, 57, 80

Nels Lindquist nlindq at maei.ca
Wed Sep 25 22:27:20 GMT 2002


On 25 Sep 2002 at 9:41, Coxe, John B. wrote:

> See details on FxScanner which probes for vulnerable IIS servers.  That
> explains 21, 57 and 80.  Perhaps 8 is sometimes used as an under-the-radar
> alternate http port or as an http proxy by some?

Pay close attention to the packet type.  Some systems log ICMP port 8 
for echo-request (ping) packets.

----
Nels Lindquist <*>
Information Systems Manager
Morningstar Air Express Inc.




More information about the list mailing list