[unisog] Odd scan - ports 57 and 80

Paul Dokas dokas at cs.umn.edu
Fri Sep 20 20:26:13 GMT 2002

On Wed, 18 Sep 2002 10:44:35 -0400 (EDT), Anderson Johnston <andy at umbc.edu> wrote:
> This is from the daily nastygrams we generate.  We got a scan of port 80
> and of port 57 (Mail Transfer Protocol - RFC 780).  Anybody seen anything
> like this or have any idea why someone might want to scan these particular
> ports?

57/TCP is sometimes used for DCC chat.  Also, I've seen several scans for it
including one scan that came from a hacked machine on my campus.

Paul Dokas                                            dokas at cs.umn.edu
Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."

More information about the unisog mailing list