phpbb and sql errors asp sqlserver odbc sql errors

Today´s Diary

If you have more information or corrections regarding our diary, please share.


ISC StormCast for Monday, May 20th 2013 http://isc.sans.edu/podcastdetail.html?id=3317

advertisement
Diary Advertisement

Use Discount Code SANSFIREISC10 when registering to get a 10% discount!!

Port 51616 - Got Packets?

Published: 2013-05-19,
Last Updated: 2013-05-19 14:06:38 UTC
by Kevin Shortt (Version: 1)

1 comment(s)

We're looking for any info or packets that target port 51616.   After witnessing a spike yesterday on his network and checking that our port data [1] corroborated his event, Andrew has written in asking what we know.    

The most useful snapshot of port activity can be seen in this graph image.  I ran the graphs as far back as 2006 and nothing more signifcant was illustrated.   The image below highlights yesterdays events as well as a more curious spike back in March.  These counts do not seem very significant at first look, but they could clearly be telling us something.   

Port 51616 - Mar 2013 to May 2013

So drop us a comment to share what you know.  We're interested to attribute this traffic to something useful.

[1] https://isc.sans.edu/port.html?port=51616

 

1 comment(s)

If you have more information or corrections regarding our diary, please share.

Diary Archive

DateAuthorTitle
2013-05-19 Kevin Shortt Port 51616 - Got Packets? (1 Comments)
2013-05-17 Daniel Wesemann e-netprotections.su ? (3 Comments)
2013-05-17 Johannes Ullrich SSL: Another reason not to ignore IPv6 (3 Comments)
2013-05-16 Joel Esler Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability (1 Comments)
2013-05-16 Daniel Wesemann Extracting signatures from Apple .apps (0 Comments)
2013-05-15 Joel Esler Call for Papers - 4th annual Forensics and Incident Response Summit EU (0 Comments)
2013-05-14 Swa Frantzen CVE-2013-2094: Linux privilege escalation (0 Comments)
2013-05-14 Jim Clausing So what passwords are those ssh scanners trying? (8 Comments)
2013-05-14 Swa Frantzen Microsoft May 2013 Black Tuesday Overview (7 Comments)
2013-05-14 Swa Frantzen Firefox & Thunderbird released (0 Comments)
Folder Icon Complete Archive
Search Diaries:

Diary Tagslink arrow

  firefox     ie 8     xss     malware containment     perimeter     enterprise certificate authority     signature     adobe     fake tech calls     0 day     packets     certificate     cyberbunker     patches     typo squatting     linux     cyberterrorism     thunderbird     advance notification     authentication     phish     sysinternals     fake charities     msft     updates     bcp 38     javascript     remnux     cloudflare     rfc6555     frequency hopping     watering hole     spamhaus     51616     notification     icloud     apple     java vulnerability     java security update     ssl     chargen     certutil     mozilla     cisco     malware     java     web app sec     micorsoft     outage     black tuesday     tools     ipv6     malware analysis     security intelligence     internet status     spoofing     email     blackhole     overview     trojan     vrt     boston marathon     ipv6 focus month     google     rfc6724     incident     firewall     scam     waco fertilizer plant explosion     hak5     boston marathon scams     61     psexec     ddos     microsoft     gov     two factors     sourcefire     certificates     passwords     preference     relays     apple id     boston marathon bombing     port 51616     snort     mt6d     bgp     cnn     apache     java 7u21     denial of service     flash     back tuesday     anti virus     webserver     got packets     spam     patch tuesday     configuration     ipv4     security advisory     boston marathon explosions     kernel     postgresql     ios     dos     protocol     happy eyeballs  
site/port/ip search:

Announcement!

IPv6 Support Added

Our iptables client now supports submitting IPv6 firewall logs.

ISC Polllink arrow

What are your plans when XP is no longer supported?

World Map

world map

Trends

trend graph