[Dshield] Ports 27015, 55000, 6881, 7008 and 65534

Chris Ramsden chris at ramsden.org.uk
Thu Jan 5 20:59:55 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joel Esler wrote:
> I would probably venture a guess that those people that are reporting  
> 6881 and 27015 have bittorrent or halflife clients on their network,  
> and are just sending in their logs.
> 
> happens to me when i use bittorrent (for legal purposes of course!),  
> I have a high influx of 6881 in my firewall logs, thusly, submitted.
> 
> J
> 
> 
Why don't you filter them (6881) out of your reports? *You* know they're
not malicious.

It pains me to see my IP address listed as "cracked" (with a lost of
6881 hits), simply because others are reporting BT afterglow. And all I
am doing is downloading an entirely legitimate copy of FC4. :(
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: GnuPT 2.6.2.1 by EQUIPMENTE.DE
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDvYjLsrfjwupP+RoRApkHAJ4k/OfJH9KdkTPGt2sRoMeTwCNItwCeOQGm
U4hzjiCIsF2ot/dsTyD8MDM=
=2aAb
-----END PGP SIGNATURE-----


-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.371 / Virus Database: 267.14.13/221 - Release Date: 04/01/2006



More information about the list mailing list