[Gllug] Attacks (?) on ports 61426/61425
alan.pope at gmail.com
Sat Apr 15 20:45:35 UTC 2006
On 15/04/06, Matthew Thompson <matt.thompson at actuality.co.uk> wrote:
> On 15 Apr 2006, at 21:13, Adrian McMenamin wrote:
> > My commodity router is picking up a lot of TCP traffic originating on
> > port 80 and attempting to connect to 61425 and 61426.
> > Any clues as to what sort of attack (I assume that's what it is) this
> > might be? The router is cheap and effective but doesn't tell me very
> > much.
> You've been assigned a new IP address by your ISP and you're now
> receiving BitTorrent traffic that was going to the old address?
Unlikely as BitTorrent uses 6881-6889 usually.
Gllug mailing list - Gllug at gllug.org.uk
More information about the GLLUG