Date: Sat, 7 Feb 2004 10:22:06 +0100 (CET) From: "Colin Raven" <me@colin-raven.com> To: freebsd-questions@freebsd.org Subject: Repeated connection attempts in daily output Message-ID: <43003.62.251.72.148.1076145726.squirrel@t-x.dignus.nl>
next in thread | raw e-mail | index | archive | help
Greetings all, In my daily security run output the last few days I'm getting hundreds of connection attempts from this particular IP as shown: Connection attempt to TCP 217.xxx.xxx.xxx:6881 from 12.215.41.59:1519 flags:0x02 All appear to be unsuccessful BTW. Traceroute shows this to be a Mediacom customer, somewhere I think in the DC or related area, not that it matters - but in the spirit of prudent inquiry. The well known ports number list from iana.org shows port 1519 as follows: vpvd 1518/udp Virtual Places Video data vpvc 1519/tcp Virtual Places Video control but there's no mention of 6881. 0x02 are - I guess - command switches or flags of some kind, though I don't know what they are. Has anyone seen this specific pattern of attempted connections on these port numbers before?? I'm blocking this IP at my firewall of course but curiosity compels me to ask the question nonetheless. Regards & TIA, -Colin
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?43003.62.251.72.148.1076145726.squirrel>