February 16th, 2003, 05:49 PM
I've noticed that lately I've been getting a lot of port probes directed at port 2417. I did some research and found out that it was Composit Server. I can't seem to find any sources on what this service/program is and why I getting probed randomly for it. I know its quite natural to find random probes but the number of them seem to be increasing and they are coming from random IP address. Any suggestions?
February 16th, 2003, 06:00 PM
composit-server 2417/tcp Composit Server
composit-server 2417/udp Composit Server
Katsuaki Naoi <firstname.lastname@example.org>
Traceroute on pfu.co.jp
Network IP address lookup:
ns.center.web.ad.jp 1 A 22.214.171.124
nejimaki2.pfu.co.jp 1 A 126.96.36.199
whois whois.arin.net 188.8.131.52:
OrgName: Asia Pacific Network Information Centre
Address: PO Box 2131
That's what I got anyways. I tend to see this APNIC spam ports alot. dunno what they do exactly.
The object of war is not to die for your country but to make the other bastard die for his - George Patton
February 16th, 2003, 06:56 PM
APNIC is the Pacifuc Rim's version of ARIN
Don\'t SYN us.... We\'ll SYN you.....
\"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides
February 16th, 2003, 07:28 PM
I know where its coming from but I need to know why and what it does.
February 16th, 2003, 08:54 PM
have you triend pulling it up in a name server service lookup program like using C:\WINDOWS\system32\nslookup.exe on Windows 2000 and XP? That way you can collect the information of who to email and then ask the Admin what's going on? And if the admin doesn't give you a good enough answer, than start taking a little action and making some calls (or emails) to people.
[shadow]There is no right and wrong, only fun and boring...
Formatting my server because someone hacked into it sounds pretty boring to me...
That\'s why it\'s all about AntiOnline.com![/shadow]