From owner-freebsd-security  Sun Nov 25 13: 0:30 2001
Delivered-To: freebsd-security@freebsd.org
Received: from peitho.fxp.org (peitho.fxp.org [209.26.95.40])
	by hub.freebsd.org (Postfix) with ESMTP id D4A4737B405
	for <freebsd-security@freebsd.org>; Sun, 25 Nov 2001 13:00:18 -0800 (PST)
Received: by peitho.fxp.org (Postfix, from userid 1501)
	id DA28813652; Sun, 25 Nov 2001 16:00:17 -0500 (EST)
Date: Sun, 25 Nov 2001 16:00:17 -0500
From: Chris Faulhaber <jedgar@fxp.org>
To: Drew Tomlinson <drew@mykitchentable.net>
Cc: freebsd-security@freebsd.org
Subject: Re: Port 1214 - Is It Used For A Specific Purpose?
Message-ID: <20011125160017.A70820@peitho.fxp.org>
Mail-Followup-To: Chris Faulhaber <jedgar@fxp.org>,
	Drew Tomlinson <drew@mykitchentable.net>,
	freebsd-security@freebsd.org
References: <003001c175c3$0c81a4e0$0b01a8c0@lc.ca.gov>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="CE+1k2dSO48ffgeK"
Content-Disposition: inline
In-Reply-To: <003001c175c3$0c81a4e0$0b01a8c0@lc.ca.gov>
User-Agent: Mutt/1.3.20i
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--CE+1k2dSO48ffgeK
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun, Nov 25, 2001 at 07:08:33AM -0800, Drew Tomlinson wrote:
> I was looking over my firewall logs this morning and noticed that there
> are many attempts to connect to TCP port 1214 from different addresses.
> I've searched the web but found no specific mention of any standard
> purpose for this port.  I suppose this is some sort of scan but was just
> wondering if anyone knows exactly what this is?
>=20

Probably KaZaa, a file-sharing network.  See
http://www.securityfocus.com/archive/75/241439 for a possible
explanation.

--=20
Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org
--------------------------------------------------------
FreeBSD: The Power To Serve   -   http://www.FreeBSD.org

--CE+1k2dSO48ffgeK
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: FreeBSD: The Power To Serve

iEYEARECAAYFAjwBW+EACgkQObaG4P6BelC7SgCfctqsS6G13irxknrAz93BhV7t
1CYAnipFepSjuqkHgy9o6z6z+AJlSc8e
=FSp9
-----END PGP SIGNATURE-----

--CE+1k2dSO48ffgeK--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message