[Dshield] Port 5666/udp

Joel Esler esler at knology.net
Mon Oct 4 22:51:09 GMT 2004


Did we figure out what this was?  Did anyone get a packet capture of 
this?  5666 was off the hook for one day.

Joel Esler

On Oct 1, 2004, at 9:19 AM, Schneelocke wrote:

> Hi everyone,
>
> I noticed a large number of connection attempts to port 5666/udp
> yesterday and today (roughly 75000 in total; also see [1]). Does
> anyone know anything about that port? The only thing I can find on it
> is an entry in Kurt Seifried's port database ([2]) pointing to
> Netsaint/Nagios; Eclipse [3] also seems to use that port locally, but
> there doesn't seem to be anything that would explain the sudden rise
> in connection attempts to that port.
>
> 1. http://www.dshield.org/port_report.php?port=5666
> 2. http://www.seifried.org/security/ports/5000/5666.html
> 3. http://www.eclipse.org/
>
> -- 
> schnee
> _______________________________________________
> DShield and the Internet Storm Center are sponsored by the SANS 
> Institute.
> To learn more about current SANS training, see http://www.sans.org .
>
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: 
> http://www.dshield.org/mailman/listinfo/list
>




More information about the list mailing list