🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #12

Re: Blocked TCP 4662 - every few seconds

#12
From: Boyd Williston
Date: Wed, 02 Jul 2003 17:10
27 lines
2094 bytes
B & A Palmer <bapalmer@internode.on.net> wrote in
news:go36gv8g7drk4btfaka432uptq02rrer52@4ax.com: 

> 
> I am being bombarded with calls on port 4662 every few seconds.Any idea
> what is happening? 
> 
>>1,[03/Jul/2003 02:55:56] Rule 'Block other in [log]': Blocked: In TCP,
>>202.30.30.85:1384->localhost:4662, Owner: no owner 1,[03/Jul/2003
>>02:55:59] Rule 'Block other in [log]': Blocked: In TCP,
>>202.30.30.85:1384->localhost:4662, Owner: no owner 1,[03/Jul/2003
>>02:56:00] Rule 'Block other in [log]': Blocked: In TCP,
>>205.250.194.17:56883->localhost:4662, Owner: no owner 1,[03/Jul/2003
>>02:56:03] Rule 'Block other in [log]': Blocked: In TCP,
>>211.213.72.155:3112->localhost:4662, Owner: no owner 1,[03/Jul/2003
>>02:56:04] Rule 'Block other in [log]': Blocked: In TCP,
>>205.250.194.17:56883->localhost:4662, Owner: no owner 1,[03/Jul/2003
>>02:56:05] Rule 'Block other in [log]': Blocked: In TCP,
>>202.30.30.85:1384->localhost:4662, Owner: no owner 1,[03/Jul/2003
>>02:56:06] Rule 'Block other in [log]': Blocked: In TCP,
>>211.213.72.155:3112->localhost:4662, Owner: no owner 
> 
> 

Possibly edonkey. See:

http://www.seifried.org/security/ports/4000/4662.html
Technical Details
Message-ID: <Xns93AC7BEE47AE3boydwillistonyahooco@130.133.1.4>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!headwall.stanford.edu!fu-berlin.de!uni-berlin.de!cpe-65-28-14-160.kc.rr.COM!not-for-mail
References: <go36gv8g7drk4btfaka432uptq02rrer52@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,f7947dda065ba139
X-Google-Attributes: gidf922c,public
X-Google-Thread: 112213,f7947dda065ba139
X-Google-Attributes: gid112213,public
X-Google-ArrivalTime: 2003-07-02 10:11:00 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!headwall.stanford.edu!fu-berlin.de!uni-berlin.de!cpe-65-28-14-160.kc.rr.COM!not-for-mail
From: Boyd Williston <boydwilliston.badstring@yahoo.com>
Newsgroups: comp.security.firewalls,aus.net.news
Subject: Re: Blocked TCP 4662 - every few seconds
Date: 2 Jul 2003 17:10:59 GMT
Lines: 27
Message-ID: <Xns93AC7BEE47AE3boydwillistonyahooco@130.133.1.4>
References: <go36gv8g7drk4btfaka432uptq02rrer52@4ax.com>
NNTP-Posting-Host: cpe-65-28-14-160.kc.rr.com (65.28.14.160)
X-Trace: fu-berlin.de 1057165859 33524117 65.28.14.160 (16 [32581])
User-Agent: Xnews/4.11.09