[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] port scan port 1081 rst
- Subject: Re: [cobalt-security] port scan port 1081 rst
- From: Goetz Lohmann <goetz.lohmann@xxxxxx>
- Date: Fri, 09 May 2003 02:04:56 +0200
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
Keith Fernandez schrieb:
> Hi Guys,
>
> I got some wierd notification about a port scan.
> What is port 1081 what is it used for.
> Did the hacker do a rst to try and avoid detection, or did my server
> do a rst to his connection.
> I am a little lost.
TCP Port 1081 is a Port used by the WinHole trojan, which is only found
on M$ Systems.
Seems some script kiddys which have to much time, scan for compromised
WIN PCs
instead of going to school or sleep ...
regards