Date: Wed, 8 Aug 2001 22:55:26 +0200 From: "Tom Beer" <mailings@analogon.com> To: "Conrad Sabatier" <conrads@home.com>, "Andre Goeree" <abgoeree@wish.net> Cc: <security@FreeBSD.ORG> Subject: Re: multiple port scans: tcp/8888 Message-ID: <002701c1204c$7386c520$0901a8c0@system> References: <XFMail.20010808094035.conrads@home.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, the matter that the scans come from different addresses says, in first instant nothing. It could be a decoy'ed attack, where only one address is the "real" origin Greets TOm > > On 05-Aug-2001 Andre Goeree wrote: > > Hello -security, > > > > Attached is part of my ipfilter log. The file shows port scans coming > > in from 25 different IP addresses from all over the world (Europe, > > USA, Asia) to tcp/8888. Since I could not find any information about > > tcp/8888, any comments are appreciated. > > > > Ago. > > Port 8888 is used by the OpenNap (Napster clone) server. I'd say this is most > likely what people are looking for. > > -- > Conrad Sabatier > conrads@home.com > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002701c1204c$7386c520$0901a8c0>