Date: Sun, 9 Aug 1998 14:01:33 -0500 (CDT) From: Jay Nelson <jdn@acp.qiv.com> To: sthaug@nethelp.no Cc: freebsd-security@FreeBSD.ORG Subject: Re: What are these connect attempts? Message-ID: <Pine.BSF.3.96.980809135827.1302B-100000@acp.qiv.com> In-Reply-To: <12556.902688876@verdi.nethelp.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 9 Aug 1998 sthaug@nethelp.no wrote: >> These all seem to come from isi.net: >> >> Connection attempt to UDP 205.238.142.73:33505 from 195.8.97.66:38025 >> Connection attempt to UDP 205.238.142.73:33506 from 195.8.97.66:38025 >... >> I'm curious about the high port numbers, although I wonder if these >> are the only ones I'm seeing. What does this mean? > >traceroute. Did that. Except for the 195.8.97.66, which is ns5.isi.net, they all seen to come from shortcut.???.isi.net. They all trace back to a running machine. What are they looking for and what do they expect to find at those high port numbers? >Steinar Haug, Nethelp consulting, sthaug@nethelp.no > -- Jay To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980809135827.1302B-100000>