Repeated connection attempts in daily output
me at colin-raven.com
Sat Feb 7 01:22:10 PST 2004
In my daily security run output the last few days I'm getting hundreds of
connection attempts from this particular IP as shown:
Connection attempt to TCP 217.xxx.xxx.xxx:6881 from 220.127.116.11:1519
All appear to be unsuccessful BTW.
Traceroute shows this to be a Mediacom customer, somewhere I think in the
DC or related area, not that it matters - but in the spirit of prudent
The well known ports number list from iana.org shows port 1519 as follows:
vpvd 1518/udp Virtual Places Video data
vpvc 1519/tcp Virtual Places Video control
but there's no mention of 6881.
0x02 are - I guess - command switches or flags of some kind, though I
don't know what they are.
Has anyone seen this specific pattern of attempted connections on these
port numbers before?? I'm blocking this IP at my firewall of course but
curiosity compels me to ask the question nonetheless.
Regards & TIA,
More information about the freebsd-questions