Security Incidents mailing list archives
Re: Odd connection attempts from many addresses
From: John Bland <shrike () cmp liv ac uk>
Date: Fri, 25 Jan 2002 17:48:49 +0000 (GMT)
On Fri, 25 Jan 2002, James Hoagland wrote:
Hello John, Have you looked into whether your host X is advertising a service on the ports in question? A game server or some such.
Yes. It turns out that 'X' was running an AudioGalaxy satellite and the connections appear to be P2P requests (the src and dest ports match the particular protocols) which matches the random nature of the hosts and the seemingly centrally managed port numbers they were trying to access. Cheers, JB -- John Bland M.Phys (Hons) AMInstP / \ PhD Student & Sys Admin Email: j.bland at cmp.liv.ac.uk / \ Condensed Matter Group http://ringtail.cmp.liv.ac.uk/ / \ Liverpool University "Don't make me bite you in hard-to-reach places!" -- The Tick ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Odd connection attempts from many addresses John Bland (Jan 19)
- Re: Odd connection attempts from many addresses James Hoagland (Jan 25)
- Re: Odd connection attempts from many addresses John Bland (Jan 25)
- Re: Odd connection attempts from many addresses James Hoagland (Jan 25)