Port 3060? What in the hell is going on?

Port 3060? What in the hell is going on?

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Port 3060? What in the hell is going on? Charles Newman 11-30-2004
Posted by Charles Newman on November 30, 2004, 12:27 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Why am I being attacked on port 3060? I am
suddenly getting hammered with all kinds of
connect attempts on port 3060? What is on
port 3060 they are looking for? Tiny Firewall
alerted me to connect attempts on that
port and I was able to block it. Score another
one for Tiny Firewall. Those of you with
hardware appliances are probably being
probed on port 3060 right now, and you
would not know it, if it were not for this
post. Better keep an eye on inbound
port 3060. Somebody is trying to do
who-knows-what on that port.




Posted by dak on November 30, 2004, 3:31 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On Tue, 30 Nov 2004 12:27:58 -0800, "Charles Newman"

> Why am I being attacked on port 3060? I am
>suddenly getting hammered with all kinds of
>connect attempts on port 3060? What is on
>port 3060 they are looking for? Tiny Firewall

TCP-3060 interserver
UDP-3060 interserver

--
dak


Posted by Arthur Hagen on November 30, 2004, 3:50 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Charles Newman
> Why am I being attacked on port 3060? I am
> suddenly getting hammered with all kinds of
> connect attempts on port 3060? What is on
> port 3060 they are looking for? Tiny Firewall
> alerted me to connect attempts on that
> port and I was able to block it. Score another
> one for Tiny Firewall. Those of you with
> hardware appliances are probably being
> probed on port 3060 right now, and you
> would not know it, if it were not for this
> post. Better keep an eye on inbound
> port 3060. Somebody is trying to do
> who-knows-what on that port.

Nope, nothing there. 1032 TCP port probes since yesterday, and not a single
one to that port. Could it be that you have someone on the *inside* running
a service that expects return traffic to port 3060, which is blocked?
Prime candidates for something like this happening include file sharing
programs.

--
*Art



Posted by Juvenal on November 30, 2004, 8:22 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Panda, Panda, Panda. or Bitdefender.

Tiny Firewall its bad very bad.




Posted by Wolfgang Kueter on November 30, 2004, 11:37 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Charles Newman wrote:

> Why am I being attacked on port 3060?

Connection attempts are not an attack.

> I am
> suddenly getting hammered with all kinds of
> connect attempts on port 3060?

Borland database stuff.

> What is on
> port 3060 they are looking for?

Interbase/Firebird SQL server.

> Tiny Firewall
> alerted me to connect attempts on that
> port and I was able to block it.

Unless you run one of the mentioned SQL servers on that port your TCP/IP
stack woukld have done exactely the same.

> Score another one for Tiny Firewall.

Complete nonsense.

> Those of you with
> hardware appliances are probably being
> probed on port 3060 right now, and you
> would not know it, if it were not for this
> post. Better keep an eye on inbound
> port 3060. Somebody is trying to do
> who-knows-what on that port.

You probably got the IP someone had before who was running one of the
mentioned SQL servers and are simply getting legitimate connection attempts
on the IP the SQL server had before it disconnected, nothing to worry
about, but a typical phenomen when people run servers on dynamic IP
addresses.


Wolfgang


Similar ThreadsPosted
HOW in the HELL did they FIND me? January 10, 2008, 6:26 pm
Help please! Sonicwall PRO 3060 March 24, 2007, 6:03 pm
sonicwall pro 3060 enhanced OS November 13, 2006, 10:01 am
sonicwall pro 3060, blocking downloads November 5, 2004, 11:16 am
Sonicwall 3060 admin access September 22, 2005, 9:41 pm
Inactivity timeout for SonicWALL Pro 3060 November 6, 2006, 11:02 am
Sonicwall PRO 3060 SYN flood attacks March 24, 2007, 4:04 pm
Sonicwall PRO 3060 VPN not Connecting to internet July 18, 2008, 8:40 am
SonicWall 3060 consent page not working June 8, 2007, 3:18 pm
netscreen: not allowed to port forward port outside port < 1024 toone inside >= 1024? December 15, 2004, 12:47 pm

The site map in XML format XML site map

Contact Us | Privacy Policy