[unisog] Odd scan - ports 57 and 80

Tom Perrine tep at SDSC.EDU
Wed Sep 18 18:32:05 GMT 2002


Port 57 (TCP or UDP) is *NOT* Mail Transport Service, AFAICT.  See

http://www.iana.org/assignments/port-numbers

which calls it "any private terminal access".

As for what its being used for, perhaps as an OS fingerprint before
launching the actual attack?

-- 
Tom E. Perrine <tep at SDSC.EDU> | San Diego Supercomputer Center 
http://www.sdsc.edu/~tep/     | 



More information about the unisog mailing list