[Gllug] Attacks (?) on ports 61426/61425

Matthew Thompson matt.thompson at actuality.co.uk
Sat Apr 15 22:08:10 UTC 2006


On 15 Apr 2006, at 21:45, Alan Pope wrote:

> On 15/04/06, Matthew Thompson <matt.thompson at actuality.co.uk> wrote:

>> You've been assigned a new IP address by your ISP and you're now
>> receiving BitTorrent traffic that was going to the old address?
>>
>
> Unlikely as BitTorrent uses 6881-6889 usually.

The BitTorrent branded client - yes. But there's a large number of  
people using other clients out there which use other much higher  
numbered ports.

Best thing to do is to get the router to forward the traffic to a  
virtual address and capture the traffic if you're that bothered about  
what it is.

M at t :o)
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list