[Dshield] Roadrunner (Long post, apologies)

Peter Street peter.street at lazerfx.co.uk
Mon Oct 29 15:08:52 GMT 2001


Thanks everyone... I'd misread the port readings.  Yes, I've been using
Limewire - it appears this is going to be quite common :P

Thanks for all the responses and the help.

Peter Street
Web Developer / Manager
LazerFX Productions
www.lazerfx.co.uk (Under Construction)


-----Original Message-----
From: dshield-admin at dshield.org [mailto:dshield-admin at dshield.org] On
Behalf Of Johannes B. Ullrich
Sent: 29 October 2001 13:00
To: dshield at dshield.org
Subject: RE: [Dshield] Roadrunner (Long post, apologies)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> ZALog.txt:FWIN,2001/10/28,20:00:16 +0:00
> GMT,65.34.72.90:1341,213.105.159.132:6346,TCP (flags:S)

The target port is 6346 for all the lines. This is 'Gnutella', one of
the 
more agressive file sharing programs. You can see these hits for days 
after someone used Gnutella at this IP address.




More information about the list mailing list