Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Port 105 (tcp/udp) Attack Activity Port 105 (tcp/udp) Attack Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Loading...
[get complete service list]
Port Information
Protocol Service Name
tcp csnet-ns Mailbox Name Nameserver
udp csnet-ns Mailbox Name Nameserver
Top IPs Scanning
TodayYesterday
45.145.66.102 (10)87.251.74.22 (17)
87.251.74.100 (6)193.27.228.13 (14)
87.251.74.22 (3)45.145.66.102 (11)
87.251.74.24 (3)51.79.142.79 (10)
193.27.228.13 (3)79.124.62.250 (10)
92.63.196.6 (2)195.54.161.67 (7)
45.141.84.30 (2)94.102.51.28 (7)
185.246.128.133 (1)87.251.74.98 (6)
176.113.115.249 (1)87.251.74.24 (3)
194.26.29.25 (1)94.102.51.29 (2)
User Comments
Submitted By Date
Comment
Lineman 2009-10-04 18:45:22
I received a buffer overflow attack on 12/18/05, destined to tcp port 105. This is the first buffer overflow against that port that I have seen. I don't know what runs on tcp/105, but some places say "Mailbox Name Nameserver". I find this answer believeable.
Rex 2009-10-04 18:45:22
Port 105 used for "ph" aka CCSO Nameserver. See RFC 2378.
Add a comment
CVE Links
CVE # Description