Re: Port 44916 Scans

Hi. all..
Nor has it done on my network iether...but 4029 its on its way up... 
Anyone got an idea whats running on that port?
// best regards Carl
*********************************************************
Carloscar Andreasson
Volvo It
Dept 8320, Da2s
SE-40805 gothenburg, sweden

+46313220665

E-mail: [email protected]
**********************************************************

Ken Connelly wrote:

> That port hasn't made my top-25 list in the past week, nor my top-10 
> list anytime this year.  Sorry...
>
> -ken
>
> Mike Rabinowitz wrote:
>
>> Hi all,
>>
>> Anyone seen scans for tcp 44916?  I haven't been able to dig anything 
>> up on this.  No trace included here, but I'll give you the general idea:
>>
>> *Packets are always flagged with SYN just trying to initiate connection
>> *TCP retries are normal with 0, 3, 6 second intervals before giving up
>> *Sources seem to have nothing in common save for the fact that they 
>> are dial-ups or home dsl's.
>>
>> I can barely find anything about this port except for on Kurt 
>> Siegfield's pages stating that this should be the starting high 
>> source client port for Linux Fedora.
>>
>> ISC does show activity for this port if you search on it, but no 
>> details are included.
>>
>> FYI, I work at an MSSP with many devices across different public 
>> address spaces.  I see this traffic at only one range: 12.0.0.0/8.  
>> This belongs to AT&T.
>>
>> Anyone else seen this at all?  Any idea what exploit this uses or 
>> what tool might generate it? 
>>
>> Thanks in advance,
>>
>>
>> Mike
>>
>>
>> _______________________________________________
>> Intrusions mailing list
>> [email protected]
>> http://www.dshield.org/mailman/listinfo/intrusions
>>  
>>
>
>
> _______________________________________________
> Intrusions mailing list
> [email protected]
> http://www.dshield.org/mailman/listinfo/intrusions
>
> .
>


-- 

                                 :tffjffffLfffffffjttjjfLGGGGGGGLLGGDDDGLt,.:.                      
                                 .jLLLLLLLLfffjjjjjttjffjfLGGLGGGGGLtj;t;,:.....                    
                                  ,LGGLLGGGGLfjffitti;itttjfffLGLLGDGLfjii,:,,ft                    
                               ;fffGGGGGGGGfjjjjtjjjjjtjffffffjjfjfLDDDGGLGLLLf;                    
                          .;,;GGGDGGDDGGfftttiitttttitttjjjffjjjjjjfLLGGGDDGGGLfj,.                 
                         ,LDGDGGDDGLLfjti;;,,;iiiitttttjttiiitttjfffLfLLLDEKEEDDGffjii;,.           
                          ;fGLLGGLfji;;,,,,,,,,;;itttjjfjfffffffjjjjfffLfLLGGDEEDGGGGGLfft,         
                 :;;.       ;GGLjii;;,,,,,,,,,,,;iitjfffffLLLLLLGLLLGDEDGGDDDGGGDDDDDDGLff.         
               .ii..        iji,;;,,,,,:,,,,,,,,,,;ittjfLLfLLGLfffffLLLLDDDGGDDDDDDDDGGLfj,         
              :tj;::::      .:,,,::.:..  ..:::,,;;iiitjtttitjjjttjfjjLLGDDGGDDGGGGDGGGLfjji         
             ifttttjjfjitjji,,,:....       .:,,,;iiiiiiittjfffffGGDDDDDGGGDDDDGLLLfLGGfjj;.         
             ;jjjjjjfttttt;:,,:....       .::,,;;iiittiittttjfGGLLGGGGDDDGDDGGLGGDDDDDGLf.          
            .tjjttffiiiii;,,,,,......  ...::,,;iiiiitttttttjjjfffLLGGGDDDDDDDDDDDEEDDDf;,,          
           .jjjtjLftjjtt;,:,,,,........::,,,;;iiitttttjjtjjjjfffffffLLLLGGDDDDDDGDEEGL;             
           ;GGLffjjffjti,,,,,,,,,,,,,:,,,,;;iiiiittttttttjjjjfffffffLLLLLLGGGDDGGDEKEEGj,           
           .ffjfffLffjt,,,,,,,,,,,,,,,,,,;;;iittttttttttjjjjjjffffLLLLLLLLLGGGGGGDDDDEG.            
            tjfLGfLLfjt;,,,,,,,,,,,,,,,,,;;iiiitttttttttttjjjjfffffLLLLLLLLLLGGGGGGGDEDD;           
           .tfffLGGLft;,,;,,;;;;;,,,,:::,,;iiiitttttttttttjjjjjffffffLLLLLLLLGGGGGGGDEt:i:          
           .jfLGDEDLji,,,;;;;;;;;,,,,,,,,,,;;iitjjjjjtttjjjjjjjfffLLLLLLLLLLGGGGGGGGGEf  .,:        
           :jfDKKDGft,,,,,,;iiiti;;;,,,,,,,,;iittttjttjjjffjjjjjjffLLLLLLLLLLGGGGGGGGED:  .;.       
            :fDKKEGft;;,;jffLGGGGGGGGLLfjtiiiiiiiittjjjffffffjjfffffLLLLLLGGGGGGGGGGLEG.            
              jKDGDft;;fGGGGGGGGGLGGGDDDDEDDDGLfjttttjjjffffffffffffLLLLLLGLGGGGGGLLLDKi.           
            :;jLfitjtjGLLDDGGGGGGGDDDDDDDDEEDDDGLjtfGGLLLffffjjjjfffffffLLLLLLGGGGLLGDEi            
          ;jfffLLji;jGGLDDGGGGGDEEEEEEEKKEKKKEDGf,.;fGEEEKEEDDDGGGGGGGGGGGGGGGGGGGLLGDG.            
         iGLLffLLfjijGGGEDDGDDEEKKKKWWWWWWWWWKKKELfGDEKKKKKKKWKKKKWWWWWWWWWWWKKKKEEDGEt             
         fLf;jfffjjtfGGEKEEEEKKKKWWWWWWWWWWWWWWWWKKKKWWWWWWWWWWWWWWWWWWWWWWWWWWWKKKKKE,             
         fLitjjftjt,GGGEKKKKKKWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWKKKKEKD:            
         tttffffLjt,iGGDKKKKKWWWWWWWWWWWWWWWWWWWWWWWWWWKEEKKKWWWWWWWWWWWWWWWWWWWKKKKEEEi            
         :tfLLLLfjt;,iGGEEKKKKKKKKWWWWWWWWWWWWWWWWWWWWKEGffLDKWWWWWWWWWWWWWWWWWWWKKKKKEi            
          tLLLLffj,;,,tGLEDEKKEKKKKWWWWWWWWWWWWWWWWWWKDffffLGEKWWWWWWWWWWWWWWWWKKKKKKKG.            
          ifGLLfji;,,,,iGGDDGEKKKKWWWWWWWWWWWWWWWWWWKDjjffLLLEWWWWWWWWWWWWWWWWKKKKKKKEt             
          ijfjiijji,,,,,;jfLDDEKWWWWWWWWWWWWWWWWWWKKLjtjjfLLGDKWWWWWWWWWWWWWKKEEEKEEED,             
          .ii,;ttti;,,;;;,;;;ijLDKKWWWWWWWWWWWWWKKDLt,:;itjLGGEWWWWWWWWWWWWWWKDGGEKEj.              
            ,;ijtii;,,;;;;;;;;;;;ifLDDEKKKKKKKEDDLft,.:,;tjfGGDKWWWWWWWWWWWWKKGLEKDi                
            :;ii;ii;;;;;;;i;;;;;;ttttjjjjfffjijfffi,:..,iitfLGDKKWWWWWWWWWWWKDDEEf                  
             ijjt;;;;;iiiiiiiiiiitjjttjjjjtjjfffj;,,.:,;itjjfLGDGDEKKKKKKKKEEDDLD;                  
             ijji;iiiiiiiiiiiiiittttjttttttjjfj;,,,,,,;iitjjfLLGGffffffLLLLLLLLLL                   
             ifi,;;;;iiiiiiiiiiitttttjtttttjft,,,,,,;;;;iitjffLLGffffffLLLLLLLLL:                   
             jj,,,;;iiiiiiiiiiitttjjjjjjjjjjj,;iiiiiiiiiiitjfffLGLfffffLLLLGGLLL                    
          ..:;,:,;;i;ittiiiiiiiittjjjjjjjjjjjtjffLLfjtttjjjjffLLLLjfffLLLLLGGLf,                    
...::;;;ttii;,,,,;iii;itiiiiiittjjjjjffffjjjjfffLfjfffffjjjfLDDGLfjfffLLLLLGGt                      
tttttttttiii,,,,;iiiiiiiiiiittttjjfffLfffji;;iiitfLffjfffLLGDDGLLfffffLLLLLGG,                      
tttjjtjiiii,,,;;;jjiiittiitttjjjffLLLLffjiiii;tjttffLLfLfLLGDDGGLLLLffLLLLLGf                       
jffLLLfttji,,;iiittiittitttttjjffLLLffjjttttttitjjjjLLLLLLGDDDDDDGLGLLLLLLGGj                       
LGGDDDGfjfi;;;iiitjtttttiittjjfffLLfjjjtttiittittjjfLLLLLLLLGDDGGGGGGLLLLLGG;                       
DDDDDDDGLGt;iiiitttjtttttjjjjffLLLLGGLGffjtitititjjfffLLfLLLLGGLGGGGLLLLLLGf                        
DDDDEEDDDDtiiiittjjjjtttjjjjjfffLGGDDGGGGDGGLLGDGGGGGLLGGGGDGGGGDDGDGLLLLGG,                        
EEEEEEEEDDjititttjjjjjjjjtjjfffLGGGGGGLLffffffffLLLLGGGGDDDDDDDGDDDGGLGGGDt                         
EEEEEEEEEEfittttjjjjjjjjjjfjLLGGGDDGGLLjiiiiiittjjfLLLLLLLGGGGLLGDDDGGGGDf.                         
EEEEEEEEEELtjjjjjjjjjjffffLLLLGDDDDGGLfjjtiiiiittjjfffLLLLLLLLLGGDDDDDGGDt.                         
EEEKKKKEEEEjjjjjfjffffjfLfLLGGDDDGGDLfffjjjjttjjjffLLLLLfLLLLLGGGGDDEDDDGGLj,                       
EEEEKKKEEEKGjfjjffffLfLLLLGLGDDGGGGGLffjjjffffffLLGLGGGGLLLLLGGGDDDDEEDDLGGDDLt.                    
EEEKKKKKKKKKDfffLLLGLGLLLLLLGDDDGLGLLffffjjfffLLLLGGGGGGLLLLGGDDDEEEEEGLGGGDDDDDt                   
KKEEKKKKKKKKEDLLLLLGDGGGGGGLGGDDDGLffffLfjfjjjjfffLLLLGGGGGGGDDDDDEEDDDDDGDDDDDDDG;                 
KKKKKWKKKKKKEEEDGGGDDDDDDDGGGDDEDGfjjjffffjjjjjjjjfLLGGGGGGDDDDDDEEEEEDDDDDDDDDDDDDj.               
KKKKKKKKKKKKKEEEEDDDEEDDEEDDDGGDEDLfjjjjfjjjjjfffffLLGGGGGDDDEDDDEEKKEDGGDDDDDDDDDDDG,              
KKKKKKKKKKKKKKKKEEEEEEEEEEEEDDDEEEKDGfjfffLffffLLLGGGGGGGDDDDDDDEEEKEDDDDDDDDDDDDDDDDG;             
KKKKKKKKKKKKKKKKKEEEEEEEEKEEEEEEDEKKKEGGDLLGLGGGGGGDDDDDDDDDDDEEEEEEDGGDDGDDDDDDDDDDDDDj            
KKKKKKKKKKKKKKKKKKEEEEEEEEEEEKKEEEEEKKKKEEEGDDDDDEEEEEDEDDEEEEEEEEEDGGDDDDDDDDDDDDDDDDDGL:          
KKKKWKKKKKKKKWWKKKEKEEEEEEEEKKKKEEEEEEEKKEKKKKKKKKKKKKKKEEEEEEKKEDDDDGDDDDDDDDDDDDDDDDDDDG,         
KKKKWKKKKKKWKKWKKKKKEEEEEEKEKKKKKKKEEEEEEEEEEEEEEKKKKKKEEEEEEEDDDDDDDDDDDDDDDDDDDDDDDDDDDDG,        
KKKKWKKKEEKKWKKWWKKKKKKKKKKKKKKKKKKKKKKEEEEEEEKKKKEDDDDDDEEDDDDDDDDDGDDDDDDDDDDDDDDDDDDDDDDDi       
KKKKKKKKKEEKKWWWWKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKEEEDDDDDDEEDDDDDDDDDDDDDDDDDDDDDDDGGGGGGGDDDDG;      
KWWWKKKKKKEKKKKWWWWKKKKKKKKKKKKKKKKKKKKKKKKKEEDDDDDDDDEEEDDDEEEEDDDDDDDDDDDDDDDDDDGDGGGGGDDDDG,     
WWWKKKKKKKKKKKKKKWWWKKKKKKKKKKWWWKKKKKKKKKEEEDDDDDDDEEEEEEEEDEEDDDDDDDDDDDDDDDDDDDGGGGGGGGGGGDG,    
WWWKKKKKKKKKKKKKKKKKKKKKKKKKKKWWWWWWKKKKKEEDDDDDEEEKKKKEEEEEEEEEDDDDDDDDDDDDDDDDDDDDGGGGGGGGGDDG:   
WKKKKKKKKKKKKKKKKKKKKKKKKKKKKWKWWWKKKKKKEEEEEEEKKKKKKKEEEEEEKEEEEDDDDDDDDDDDDDDDDDDDDGGDGGGGGGDDL.  
KWWWKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKEEEEEKKKKKKKEEEEEEEEKEEEDDDDDDDDDEDDEDDDDDDDDDDGGDGGGGGDDj  



_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions