[Intrusions] Re: [unisog] Scanning ports

[Anderson Johnston]

That explains the large, ugly payloads.

Thanks for your help!

					- Andy

On Fri, 3 Sep 2004, Paul Dokas wrote:

> On Fri, 3 Sep 2004 12:02:13 -0400 (EDT) Anderson Johnston <andy at umbc.edu> wrote:
> >
> > A system in our residential network looks to be scanning
> > random IPs, mostly on port 6881.  Does this scanning pattern seem
> > familiar to anyone?
>
> It's probably not scanning.  It's probably running a BitTorrent client.
>
>   http://www.portsdb.org/bin/portsdb.cgi?portnumber=6881&protocol=ANY
>
>
> Paul
> --
> Paul Dokas                                            dokas at cs.umn.edu
> ======================================================================
> Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."
>

------------------------------------------------------------------------------
** Andy Johnston (andy at umbc.edu)          *                                 **
**                                        * PGP key:(afj2002) 4096/8448B056 **
** Office of Information Technology, UMBC *   4A B4 96 64 D9 B6 EF E3 21 9A **
** 410-455-2583 (v)/410-455-1065 (f)      *   46 1A 37 11 F5 6C 84 48 B0 56 **
------------------------------------------------------------------------------