One Blog

Top 5 ports

Found from the daily ISS Internet Risk Report saying that 9/July 's top 5 ports. ( Believed it refers to the target Port being scan or attacked).

Yesterday's Top Five Ports: (Greenwich Mean Time)
-------------------------
- tcp 1481
- udp 1434
- tcp 50000
- tcp 15176
- tcp 16961

airs 1481/tcp # AIRS
ms-sql-m 1434/udp # Microsoft-SQL-Monitor

SubSARI 50000/tcp #[trojan] SubSARI
ibm-db2 50000/tcp #IBM DB2 generic listener


Last 2 ports are not defined. Targeting high port....why? Some backdoor listening, mother looking for son?

Labels: security

posted by 一零一零 @ 7/13/2009