Re: [unisog] Scanning ports
Anderson Johnston <[email protected]>
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <Pine.LNX.4.58L6.0409031306170.17364__2297.51422671161$1094302494$gmane$org@linux3.gl.umbc.edu> |
That explains the large, ugly payloads. Thanks for your help! - Andy On Fri, 3 Sep 2004, Paul Dokas wrote: > On Fri, 3 Sep 2004 12:02:13 -0400 (EDT) Anderson Johnston <[email protected]> wrote: > > > > A system in our residential network looks to be scanning > > random IPs, mostly on port 6881. Does this scanning pattern seem > > familiar to anyone? > > It's probably not scanning. It's probably running a BitTorrent client. > > http://www.portsdb.org/bin/portsdb.cgi?portnumber=6881&protocol=ANY > > > Paul > -- > Paul Dokas [email protected] > ====================================================================== > Don Juan Matus: "an enigma wrapped in mystery wrapped in a tortilla." > ------------------------------------------------------------------------------ ** Andy Johnston ([email protected]) * ** ** * PGP key:(afj2002) 4096/8448B056 ** ** Office of Information Technology, UMBC * 4A B4 96 64 D9 B6 EF E3 21 9A ** ** 410-455-2583 (v)/410-455-1065 (f) * 46 1A 37 11 F5 6C 84 48 B0 56 ** ------------------------------------------------------------------------------ _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions