[Dshield] Favor to ask the list.

dshield.org@keithbergen.com dshield.org at keithbergen.com
Wed Jun 29 00:38:35 GMT 2005


I have seen instances where DirecPC computers or routers will answer on
all ports. Evidently there is a configuration/modem type where this
happens.

It may be that this device is doing the same thing.

Keith.

-----Original Message-----
From: list-bounces at lists.dshield.org
[mailto:list-bounces at lists.dshield.org] On Behalf Of Guy Dickinson
Sent: Tuesday, June 28, 2005 6:10 PM
To: General DShield Discussion List
Subject: Re: [Dshield] Favor to ask the list.


I once came across an integrated device at NYU that responded on all 
65535 ports. It was an integrated device with an ethernet port that was 
created as a part of an art school project. Its http server was 
responding on every port.

So another possiblity might be a misconfigured appliance or integrated 
device. Sorry I don't have any more details on the particular device I 
found in the first place. All I remember is that it made my nmap scan 
logs very, very large.

Best,

Guy

Aaron Lewis wrote:
> Or honeypots. 
> 
> 
>>-----Original Message-----
>>From: list-bounces at lists.dshield.org
>>[mailto:list-bounces at lists.dshield.org]On Behalf Of Mrcorp
>>Sent: Tuesday, June 28, 2005 5:04 PM
>>To: General DShield Discussion List
>>Subject: Re: [Dshield] Favor to ask the list.
>>
>>
>>Yes, I have seen that on infected machines.
>>
>>Mrcorp
>>
>>--- Paul Marsh <pmarsh at nmefdn.org> wrote:
>>
>>
>>>I was hopping a few users on the list could do an nmap on 
>>
>>64.202.165.92
>>
>>>and tell me what they see.  I've never seen a scan come 
>>
>>back reporting
>>
>>>every port open, is this possible?
>>>
>>>Thanx, Paul
>>>
>>>
>>>_______________________________________________
>>>send all posts to list at lists.dshield.org
>>>To change your subscription options (or unsubscribe), see:
>>>http://www.dshield.org/mailman/listinfo/list
>>>
>>
>>
>>_______________________________________________
>>send all posts to list at lists.dshield.org
>>To change your subscription options (or unsubscribe), see: 
>>http://www.dshield.org/mailman/listinfo/list
>>
> 
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list

_______________________________________________
send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list



More information about the list mailing list