Re: up-to-date list of most common ports

Michael Tokarev <[email protected]> Sun, 22 May 2005 19:28:47 +0400
Newsgroups gmane.mail.spam.dsbl.general
Organization Telecom Service, JSC
Message-ID <[email protected]>
Kai Gallasch wrote:
> 
> Hi Michael.
> 
> About a week ago I sent the following mail to [email protected]
> no answer until now..

I've seen your email but for some reason didn't reply at that
time, and forgot about it later.

Well, I guess there's no *good* portlist anymore.  Because
noone wants to perform full portscans of all suspect hosts,
and because most proxies nowadays uses really random ports
(times when new trojan "epidemia" installed proxies on alot
of PeeCees all listening on the same port are gone).

I used to maintain my own list, available as DNS record --

   dnstxt p0.cp.corpit.ru

(ready for proxycheck command line) but I too don't pefrorm
full protscans (and never did, because we're paying per traffic),
so this portlist gets almost no new entries.  About a week
ago I've added two or 3 more ports, and removed 5 old ones.

That's basically all what I know...

/mjt

----------------------------------------------
This message was sent to the opt-in DSBL list.
If you do not want to receive DSBL messages,
please send mail to [email protected].