Threat Level: green Handler on Duty: Russ McRee

SANS ISC: InfoSec Handlers Diary Blog InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

TCP Port 8181 Puzzle

Published: 2005-02-06
Last Updated: 2005-02-06 19:24:17 UTC
by Tony Carothers (Version: 1)
0 comment(s)

Still investigating TCP Port 8181 Activity



While we are still looking for more captures of TCP port 8181, "Frealek" suggested today that we are looking at a "personal scanner of some strange software". Another idea submitted by Frealek is a "way to find last hop that routes packets". This technique is most commonly referred to when discussing a mapping tool called "Firewalk"



http://www.packetfactory.net/projects/firewalk/



Firewalk works using *incrementing* TTL's versus the decrementing we are seeing. So the puzzle continues; anybody that has thoughts, comments, questions, or suggestions is welcome to submit anytime.




Tony Carothers

Handler on Duty
Keywords:
0 comment(s)
Diary Archives