Printable View
I've noticed that lately I've been getting a lot of port probes directed at port 2417. I did some research and found out that it was Composit Server. I can't seem to find any sources on what this service/program is and why I getting probed randomly for it. I know its quite natural to find random probes but the number of them seem to be increasing and they are coming from random IP address. Any suggestions?
composit-server 2417/tcp Composit Server
composit-server 2417/udp Composit Server
Katsuaki Naoi <[email protected]>
Traceroute on pfu.co.jp
Alias:
nejimaki2.pfu.co.jp
Network IP address lookup:
ns.center.web.ad.jp 1 A 202.248.0.34
nejimaki2.pfu.co.jp 1 A 202.248.171.130
whois whois.arin.net 202.248.171.130:
OrgName: Asia Pacific Network Information Centre
OrgID: APNIC
Address: PO Box 2131
City: Milton
StateProv: QLD
PostalCode: 4064
Country: AU
That's what I got anyways. I tend to see this APNIC spam ports alot. dunno what they do exactly.
APNIC is the Pacifuc Rim's version of ARIN
I know where its coming from but I need to know why and what it does.
have you triend pulling it up in a name server service lookup program like using C:\WINDOWS\system32\nslookup.exe on Windows 2000 and XP? That way you can collect the information of who to email and then ask the Admin what's going on? And if the admin doesn't give you a good enough answer, than start taking a little action and making some calls (or emails) to people.