[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20050823231615.GA16496@SDF.LONESTAR.ORG>
Date: Wed Aug 24 03:07:19 2005
From: saintau at sdf.lonestar.org (Jackson McKinley)
Subject: Port 8041 Syn flood
Dshield is showing a down swing.. have you got packet captures?
http://isc.sans.org/port_details.php?port=8041&repax=1&tarax=2&srcax=2&percent=N&days=70
On Tue, Aug 23, 2005 at 09:39:39AM +0530, Rajesh wrote:
> Hi All,
>
> Is anyone else seeing a very large increase of SYN packets coming to
> port 8041 over the last couple of days. It is coming from different
> addresses to most of my machines in separate networks. I couldn't find
> information about any services that use port 8041 yet. So for now I am
> assuming that this is just a SYN flood. Can anyone else shed some more
> light into this?
>
> Thanks
> Rajesh
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
--
saintau@....lonestar.org
SDF Public Access UNIX System - http://sdf.lonestar.org
Powered by blists - more mailing lists