Re: Port 6688 Traffic

[H D Moore <hdm () SECUREAUSTIN COM>]

What you are seeing is a napster client's data port.  As long as you
dont download Metallica (and have Lars hunt you down) you should be safe
;)

-HD


http://www.digitaloffense.net

Crist Clark wrote:
> Someone recognize this protocol? This is what happens when I try to
> telnet to one of these machines,
>
>   $ telnet remote-host.at-some.cable-isp.com 6688
>   Trying 24.123.45.67...
>   Connected to remote-host.at-some.cable-isp.com
>   Escape character is '^]'.
>   1
>
> At this point, I don't know what to say, so I type something, 'HELP,' in
> this example,
>
>   1HELP
>   INVALID REQUESTConnection closed by foreign host.
>
> Anyone familiar with this? If it is Napster or some sharing program,
> fine, whatever, I am worried about malware.