[Gllug] Attacks (?) on ports 61426/61425

[Alan Pope]

On 15/04/06, Matthew Thompson <matt.thompson at actuality.co.uk> wrote:
> On 15 Apr 2006, at 21:13, Adrian McMenamin wrote:
>
> > My commodity router is picking up a lot of TCP traffic originating on
> > port 80 and attempting to connect to 61425 and 61426.
> >
> > Any clues as to what sort of attack (I assume that's what it is) this
> > might be? The router is cheap and effective but doesn't tell me very
> > much.
>
> You've been assigned a new IP address by your ISP and you're now
> receiving BitTorrent traffic that was going to the old address?
>

Unlikely as BitTorrent uses 6881-6889 usually.

Cheers,
Al.
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug