TCP Port 65506
Link Logger Home ZyXel Banner Binary Visions
Netgear
LinkSYS
Router

TCP 65506
Link Logger for Windows
Home Home Product Info Product Info Download Download/Purchase Support Support  
Link Logger for Windows

NewsLatest News

Screen ShotsScreenshots

Customer CommentsFeedback

Common ScansScans

Additional ResourcesResources

TCP Port 65506

Common Use

Used as a Spam email relay.

Inbound Traffic

With the recent outbreak of myDoom a number of systems were infected with viruses (Agobot for example) via upload and execution to TCP port 3127.  These virus would then install a proxy on TCP port 65506 which was then used to relay email spam.

Outbound Traffic

Outbound scans especially if occurring in volume should be considered an indication of a possible infection or compromise on the source computer and should be investigated immediately.

Additional Information

PortPeeker Capture of 65506 scans and email relay attempts

Page last updated on March 12, 2004