Re: Port probes: 1680 UDP, 9393 TCP, and 4000 TCP

[Phil Dyer <dyer () flyer homeip net>]

On Mon, 18 Jun 2001, Paul Gear wrote:

> 1.  1680 UDP
>
> ... kernel: Packet log: input DENY ppp0 PROTO=17 xxx.xxx.xxx.xxx:1680
> xxx.xxx.xxx.xxx:1680 L=90 S=0x00 I=47873 F=0x0000 T=127 (#84)
>
> What is port 1680?  I can't seem to find any information on it anywhere
> on the web.  I've only seen this one packet, and it was from the IP
> address adjacent to mine on the dialup bank.

UDP 1680 is Microcom's Carbon Copy. I get it from time to time from
other Earthlink users in my IP range.

They probably have a static IP set to connect to, and it is changing when
disconnected.

-- 
=-=-=-=-=--=-=--=-=-=-=
Phil Dyer
dyer () flyer homeip net
=-=-=-=-=--=-=--=-=-=-=