Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: TCP Port 8181 Puzzle SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
TCP Port 8181 Puzzle

Still investigating TCP Port 8181 Activity



While we are still looking for more captures of TCP port 8181, "Frealek" suggested today that we are looking at a "personal scanner of some strange software". Another idea submitted by Frealek is a "way to find last hop that routes packets". This technique is most commonly referred to when discussing a mapping tool called "Firewalk"



http://www.packetfactory.net/projects/firewalk/



Firewalk works using *incrementing* TTL's versus the decrementing we are seeing. So the puzzle continues; anybody that has thoughts, comments, questions, or suggestions is welcome to submit anytime.




Tony Carothers

Handler on Duty
Tony

150 Posts
ISC Handler
Feb 6th 2005

Sign Up for Free or Log In to start participating in the conversation!