[asterisk-users] What is digium doing on port 113?

Hans Witvliet hwit at a-domani.nl
Sat Oct 30 18:37:33 CDT 2010


While on the subject,

what is digium doing on my port 113?

just from my logfile:
Oct 31 01:11:07 fw2 kernel:  EXT; INC, INTRUDER IN=eth0 OUT= MAC=08:00:20:da:3b:4a:00:90:1a:42:70:d3:08:00 
SRC=216.207.245.17  LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=15394 PROTO=TCP SPT=56211 DPT=113 WINDOW=0 RES=0x00 RST URGP=0

host 216.207.245.17
17.245.207.216.in-addr.arpa domain name pointer lists.digium.com.

I'm not logged @digium, not compiling, not accessing list archives retieving svn's


>From http://www.unidata.ucar.edu/support/help/MailArchives/idd/msg00983.html
Port 113 supports what is known as an IDENT service.  Basically, it tries
to determine the remote user of a given client network connection.
Yesterday, our web server (128.117.149.62) logged several connections from
mail.arilabs.com (206.129.115.118) to which it attempts a connection on
port 113.  If it is sucessful, it will determine the remote user who
connected.  This service is widely used on Unix systems, but not really
supported on Windows or Mac operating systems. 

So why is the list-server sending an ident-REQ to my IP?

It is blocked anyway, bur WHY???

hw




More information about the asterisk-users mailing list