Results 1 to 8 of 8

Thread: ATTN: Getting massive TCP Port Scans on TCP PORT 4662. Anyone Else getting these?

  1. #1
    A+, Security+, Mobility+ Shinobi's Avatar
    Join Date
    Jan 2001
    Location
    South Carolina
    Posts
    4,432
    Blog Entries
    1

    Exclamation ATTN: Getting massive TCP Port Scans on TCP PORT 4662. Anyone Else getting these?

    I don't have "e-donkey" client either.
    I'm gettting at least 11 hits on my hardware router.
    If any of you guyz are, let me know. Tks.
    Shinobi
    _______________________________________________
    Vendor neutral certified in IT Project Management, IT Security, Cisco Networking, Cisco Security, Wide Area Networks, IPv6, IT Hardware, Unix, Linux, and Windows server administration

  2. #2
    R.I.P. 2013-11-22 blebs's Avatar
    Join Date
    Dec 2000
    Location
    North Canton, Ohio
    Posts
    12,819
    let me fire up logging and I'll tell you soon.

  3. #3
    A+, Security+, Mobility+ Shinobi's Avatar
    Join Date
    Jan 2001
    Location
    South Carolina
    Posts
    4,432
    Blog Entries
    1
    tks man... i'm wondering if it might be a new RPC Worm?
    Also some hits on the 10xxx Ports...
    _______________________________________________
    Vendor neutral certified in IT Project Management, IT Security, Cisco Networking, Cisco Security, Wide Area Networks, IPv6, IT Hardware, Unix, Linux, and Windows server administration

  4. #4
    A+, Security+, Mobility+ Shinobi's Avatar
    Join Date
    Jan 2001
    Location
    South Carolina
    Posts
    4,432
    Blog Entries
    1
    Damn it, I have to go to work. I'll be reading this thread thoigh, so if anyone is getting these hits, let me know. I see how bad it is tomorrow morning.
    Thanks.
    _______________________________________________
    Vendor neutral certified in IT Project Management, IT Security, Cisco Networking, Cisco Security, Wide Area Networks, IPv6, IT Hardware, Unix, Linux, and Windows server administration

  5. #5
    SG Enthusiast TrevGlas's Avatar
    Join Date
    Jul 2003
    Location
    Missouri
    Posts
    3,177
    Im getting hits on alot of ports... your not alone :P

    Trev

  6. #6
    R.I.P. 2013-11-22 blebs's Avatar
    Join Date
    Dec 2000
    Location
    North Canton, Ohio
    Posts
    12,819
    So far since re enabling logging 265 ICMP echo requests and one port 1026 hit.

  7. #7
    R.I.P. 2013-11-22 blebs's Avatar
    Join Date
    Dec 2000
    Location
    North Canton, Ohio
    Posts
    12,819
    I'm only seeing the normal overload of ping traffic and 1026 hits. Nothing else thus far.

  8. #8
    Regular Member RAAF453_Shep's Avatar
    Join Date
    Jul 2003
    Location
    San Antonio, Tx
    Posts
    286
    my Sygate is sitting quietly.... but will start a log to see.
    I posted about a new worm I recieved... will go check for info on it next.
    nothing like my Virtual Spitfire Mk IXc and a few wingmen to cover my 6 !

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •