From owner-freebsd-security  Wed Aug  8  7:40: 2 2001
Delivered-To: freebsd-security@freebsd.org
Received: from dolphin.idleplay.net (cx344940-a.meta1.la.home.com [24.6.21.74])
	by hub.freebsd.org (Postfix) with ESMTP id B758337B417
	for <security@FreeBSD.ORG>; Wed,  8 Aug 2001 07:39:56 -0700 (PDT)
	(envelope-from conrads@dolphin.idleplay.net)
Received: (from conrads@localhost)
	by dolphin.idleplay.net (8.11.5/8.11.4) id f789eZ910628;
	Wed, 8 Aug 2001 09:40:35 GMT
	(envelope-from conrads)
Message-ID: <XFMail.20010808094035.conrads@home.com>
X-Mailer: XFMail 1.5.0 on FreeBSD
X-Priority: 3 (Normal)
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0
In-Reply-To: <20010805223127.A4779@mandark.attica.home>
Date: Wed, 08 Aug 2001 09:40:35 -0000 (GMT)
Organization: @Home Network
From: Conrad Sabatier <conrads@home.com>
To: Andre Goeree <abgoeree@wish.net>
Subject: RE: multiple port scans: tcp/8888
Cc: security@FreeBSD.ORG
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


On 05-Aug-2001 Andre Goeree wrote:
> Hello -security,
> 
> Attached is part of my ipfilter log. The file shows port scans coming
> in from 25 different IP addresses from all over the world (Europe,
> USA, Asia) to tcp/8888. Since I could not find any information about
> tcp/8888, any comments are appreciated.
> 
> Ago.

Port 8888 is used by the OpenNap (Napster clone) server.  I'd say this is most
likely what people are looking for.

-- 
Conrad Sabatier
conrads@home.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message