[unisog] As the worm turns, Slapper variants begin using UDP ports 4156 and 1978 (instead of 2002)

Rich Graves rcgraves at brandeis.edu
Sun Sep 22 21:47:22 GMT 2002


On Sun, 22 Sep 2002, H. Morrow Long wrote:

> Several (see http://diswww.mit.edu/charon/nanog/52239) have noticed
> Slapper using UDP port 4156 today (and apparently yesterday as well

Thanks for the heads up, one down.

Note it doesn't have the friendly, easy-to-distinguish source = destination 
behavior of the original.

129.64.154.73    12.240.146.45    17    27015    4156     333         2         
129.64.154.73    61.35.130.76     17    27015    4156     330         2         
129.64.154.73    24.95.183.243    17    27015    4156     330         2         
-- 
Rich Graves <rcgraves at brandeis.edu>
UNet Systems Administrator




More information about the unisog mailing list