Re: Port 50897?

From: TerryZ (tmziemniak1_at_yahoo.com)
Date: 11/17/03 

Date: 17 Nov 2003 13:36:21 -0800

"_____" <notme@nospam.net> wrote in message news:<3fb66769$0$25685$a729d347@news.telepac.pt>...
> From 6 to 7 November I had 8692 attempts to establish a TCP
> connection to this port:
> [06/Nov/2003 20:32:02] Packet filter: ACL 1:32 WAN: drop
> packet in id=630844 : TCP 80.133.72.39:3383 ->
> 10.0.0.1:50897
> [06/Nov/2003 20:32:03] Packet filter: ACL 1:32 WAN: drop
> packet in id=630847 : TCP 81.48.102.220:7294 ->
> 10.0.0.1:50897
> [06/Nov/2003 20:32:03] Packet filter: ACL 1:32 WAN: drop
> packet in id=630848 : TCP 220.76.82.147:3892 ->
> 10.0.0.1:50897
> [06/Nov/2003 20:32:04] Packet filter: ACL 1:32 WAN: drop
> packet in id=630885 : TCP 80.136.227.15:4042 ->
> 10.0.0.1:50897
> [06/Nov/2003 20:32:04] Packet filter: ACL 1:32 WAN: drop
> packet in id=630896 : TCP 212.174.147.71:5316 ->
> 10.0.0.1:50897
> [06/Nov/2003 20:32:05] Packet filter: ACL 1:32 WAN: drop
> packet in id=630915 : TCP 80.133.72.39:3383 ->
> 10.0.0.1:50897
> [06/Nov/2003 20:32:06] Packet filter: ACL 1:32 WAN: drop
> packet in id=630930 : TCP 81.48.102.220:7294 ->
> 10.0.0.1:50897
>
> This is my environment: Internet -- Alcatel Speedtouch
> 510i -- Winroute (4.2, Win2000 SP4) -- Ipcop 1.3 -- HUB -- 5
> PCs (Win2000, XP & 98).
> The Alcatel 510 has the firewall enabled.
> There are no services open to the outside: port forwarding
> is not enabled.
> 10.0.0.1 is the IP for the Winroute Firewall.
> There is no reported activity for port 50897 by the Ipcop
> firewall, so I am assuming that it was stopped by the
> Winroute firewall.
> I am just curious on this issue. Did anyone in the
> collective saw this port being hammered? I generally see
> attempts for other ports, but not in such a systematic way.
> I tried Google, but came empty on this.
>
> me

Looking on Dshield it looks like activity on this port is pretty low.
DShield does not show any registered (or common) apps for this port.

http://www.dshield.org/port_report.php?port=50897

Relevant Pages

  • Re: keeping ports open
    ... If a port is open, it means that 1) a software or service is running on your ... and 2) you're not using a firewall or your firewall isn't ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ...
    (microsoft.public.security)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CEICW fails at firewall config
    ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to Maintain an IIS Server?
    ... >> server running on a Windows 2000 server. ... > before a firewall and antivirus have been installed]. ... > program or executable using that port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Is secedit.exe left by a hacker?
    ... > tested on port 445. ... > I have a Linksys router that I use as a firewall to my ... Secedit.exe is the name of a legitimate Windows file, ... investigate the files on your computer - antivirus with the latest updates ...
    (microsoft.public.win2000.security)
Quantcast