Security Incidents mailing list archives

RE: [suse-security] Port 13139 - attack?


From: "Richard Stanway" <incidents () r1ch net>
Date: Tue, 19 Feb 2002 18:19:42 -0000



Has anyone else seen this happen recently.  Is there a new
attack of some sort which is
directed to port 13139?  I have never noticed this specific port
before with so many hits
and now it is starting to rival the old nimba entries in my logs.

Thanks,

Jim

He mentioned in another post later that it's UDP.

I just noticed this too when going over some of my firewall logs - turns out
port 13139 is used by GameSpy Arcade for "Custom UDP Pings". Simply by
joining one of the gamespy game channels will trigger every user in there to
start pinging you in this way.

Richard Stanway
http://www.r1ch.net/


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: