You may also wish to use www.portsdb.org for searching ports. They have a DNS interface for it as well. I wrote a batch file called port.bat so I can just type, for example, port 27960 at a prompt.
@echo off nslookup -q=txt %1.tcp.portsdb.org nslookup -q=txt %1.udp.portsdb.org Check for both TCP and UDP ports, nothing tricky but useful. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, April 22, 2002 10:42 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: [gb-users] Port 27960 It would seem like Quake III as per Frank. Link that may be of use :- http://www.networkice.com/Advice/Exploits/Ports/default.htm rgds gmcb -----Original Message----- From: MWiener [mailto:[EMAIL PROTECTED]] Sent: 22 April 2002 16:38 To: [EMAIL PROTECTED] Subject: [gb-users] Port 27960 All, I have been hit repeatedly by port scans for UDP 27960. Usually searching for that port on my machine. Two or three pokes at a time by more than a dozen source IP addresses over the last 48 hours. Sometimes it is both the source and destination ports which is why I think it may be a virus. Has anyone else seen this? The other possibility is that I am the only one seeing this and that someone is trying to use a likely port that the gnat box would use to see if they can poke through the firewall. If it is the latter, I would really like to know if I have been targeted. Thanks for your help, Mike. [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archive of the last 1000 messages: http://www.mail-archive.com/[email protected]
