Destination port 13816

[G0AOZ]

Tried this post elsewhere, but no takers...

I've noticed in my firewall logs that there's a considerable amount of traffic attempting to hit port 13816. Can anyone tell me what this is likely to be please? It's coming from a variety of different sources.

ROGER.

 

[kippy13]

Did you see the answer you got on the IPCOP support mainpage?
Port 13816 is not listed at CERT's "ports for known vulnerabilities", so it's not likely to be a current worm/virus.

Port 13816 is listed as "unassigned" at the IANA port assignment list, so it's not a known service.

You'll have to look at the origin/destination and/or capture some packets and analyse it yourself if you really want to know.

If the traffic, which is obviously being blocked by your firewall, persists, contact abuse@the_senders_isp and make a complaint. You can also stop logging the offending packets, and simply ignore it - eventually they will give up and go away...

-D

***************************************
Looking for the best answers:
faq222-2244
Keeping your system clear of malware:
faq608-4650
***********************************
Dont forget to post back with the eventual resolution.
***************************************

 

[G0AOZ]

Thanks KIPPY13, and I have just read the IPCop forum. Yes, I'd noticed it wasn't on the IANA list, and a search for problems on that port didn't bring up anything. Would you believe, I haven't seen any further instances of it in my log since posting here! Perhaps the perpetrator reads the Tek-Tips forums...

ROGER.