[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [OT] port 2896



On Tue, Dec 02, 2003 at 08:20:48PM +0100, Arnt Karlsen wrote:
> On Tue, 2 Dec 2003 18:05:55 +0100, 
> Arnt Karlsen <arnt@c2i.net> wrote in message 
> <[🔎] 20031202180555.3ba0ad2b.arnt@c2i.net>:
> 
> > On Tue, 2 Dec 2003 03:38:48 +0200, 
> > Micha Feigin <michf@post.tau.ac.il> wrote in message 
> > <[🔎] 20031202013848.GA3654@luna.mooo.com>:
> > 
> > > I keep seeing on my firewall logs quite a few droped attempts to
> > > connect to port 2896 both udp and tcp.
> > > This is a computer conected through an adsl modem (it was on more
> > > then one of the dynamicaly allocated ips).
> > > All I could find with a search on google is that its assigned to
> > > ecovisiong6-1, but I couldn't find anything on that.
> > > Anyone knows what this is service is supposed to be? Is this a hack
> > > in attempt?
> > > 
> > > Thanx
> > > 
> > > 
> > 
> > ..cat /etc/services |grep " 2896" produced nothing, try 
> > ' lsof |grep " 2896" ' and ' ps aux |grep " 2896" '.
> 
> ..eh, and 'netstat -nape |grep 2896 ', trigger happy today.  ;-) 
> 

Thanks for all these. I already tried them before I posted and nothing
is listening on that port (including all computers I have behind the
firewall, and that includes the M$ computer).
Couldn't find anything coherent on google either. It seems like there is
something that can listen on that port as google states but I never
heard of it and googling for that didn't help either.
Probably some program the previous user of the ip on my provider's
network was using.
I could try scanning my providers network for something listening on
that port and try to convince it to identify ;-)

> > ..more ideas?  There is also
> > http://www.google.com/search?q=%22port+2896%22+tcp+udp
> > suggesting someone is trying to crack your wintendo.  ;-)
> > 
> 
> 
> -- 
> ..med vennlig hilsen = with Kind Regards from Arnt... ;-)
> ...with a number of polar bear hunters in his ancestry...
>   Scenarios always come in sets of three: 
>   best case, worst case, and just in case.
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 



Reply to: