Security

General discussion

Gravatar
Locked

port 666?

By zekeHLM ·
My router/firewall has been dropping a lot of packets lately from miscellaneous sources. Recently i have found some that have interested me a lot, these packets from source port 666 and destination port 1026. All have been dropped by the firewall, but should i STILL be worried? What does this mean? I have broadband internet. Anyone have any good resources to find information about certain ports and internet traffic?

Thank you,
ZeKe

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

gravatar
Collapse -

by CptOmlly In reply to port 666?

I believe that source port 666 is used by the game Doom, but it is also commonly used by backdoor and trojan programs. Port 1026 is now commonly being used for WMS Spamming, since many ISP's are still blocking port 135 (due to MS Blaster worm).

A good list of ports and their associated applications can be found here:
http://www.commodon.com/threat/threat-allports.htm
Just remember that these are only the most "common" user's of the ports, but other application can use them also.

You can also find good information on port traffic at the Internet Storm Center, http://isc.sans.org

gravatar
Collapse -

by CptOmlly In reply to

Further research turned up this post on DShield:

http://www.dshield.org/pipermail/list/2003-December/013050.php (remove any spaces)

This appears to be definitely Windows Messanger service popup spam traffic.

gravatar
Collapse -

by zekeHLM In reply to

Interesting... i'll look into it, thanks

gravatar
Collapse -

by zekeHLM In reply to port 666?

This question was closed by the author

Back to Security Forum

Start or search

Related Discussions

Related Forums