From owner-freebsd-security Sun Aug 4 9:15:37 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E15BA37B400 for ; Sun, 4 Aug 2002 09:15:35 -0700 (PDT) Received: from bastet.rfc822.net (bastet.rfc822.net [64.81.113.233]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8DE1043E6A for ; Sun, 4 Aug 2002 09:15:35 -0700 (PDT) (envelope-from pde@bastet.rfc822.net) Received: by bastet.rfc822.net (Postfix, from userid 1001) id 984EB9ECDA; Sun, 4 Aug 2002 11:16:18 -0500 (CDT) Date: Sun, 4 Aug 2002 11:16:18 -0500 From: Pete Ehlke To: Ian Smith Cc: freebsd-security@FreeBSD.org Subject: Re: port 6112 ? Message-ID: <20020804161618.GA40069@rfc822.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.3.27i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, Aug 05, 2002 at 01:46:18AM +1000, Ian Smith wrote: > > Today I notice a dialup user getting and sending UDP packets on 6112, > with various IPs; looks to be a fairly steady stream of in- and outbound > traffic at about 800cps each way over, say, half-hour sessions. > > Game, trojan, or yet another messenger type thing? > Gamer. Probably starcraft or one of its cousins. -P. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message