Re: [fw-wiz] port 27015

From: hermit921 (
Date: 01/02/04

  • Next message: Bill James: "RE: [fw-wiz] port 27015"
    Date: Fri, 02 Jan 2004 09:58:49 -0800

    I am aware of the Half-Life game association. What I saw was 10 different
    IP sources scanning my entire class B on port 27015, all starting within
    one hour of each other. That didn't sound like a normal game
    behavior. But after that day, the scans didn't return.


    At 02:15 PM 1/1/2004, Don Parker wrote:
    >Hi there, port 27015 is often associated with Half Life online gaming
    >servers. Are you running one of these? There are some security
    >considerations to mull over if you are as these can be used in DDoS
    >attacks and the such. Just google for "port 27015 tcp" and you will get
    >quite a few hits on it.
    >Don Parker, GCIA
    >Intrusion Detection Specialist
    >Rigel Kent Security & Advisory Services Inc
    >ph :613.249.8340
    >On Dec 22, hermit921 <> wrote:
    >Starting at 10:49 UTC December 22 I started seeing a 20-30 incoming packets
    >per second on TCP port 27015. Every few minutes another source
    >appeared. Any idea what is going on?
    >firewall-wizards mailing list
    ><a href='

    firewall-wizards mailing list

  • Next message: Bill James: "RE: [fw-wiz] port 27015"