?
Solved

TCP Port 5150, increased dropped connections

Posted on 2008-01-25
2
Medium Priority
?
1,040 Views
Last Modified: 2012-05-05
Hi everyone,

I have been getting tons of connection attempts to TCP port 5150 on my firewall.  The connection attempts are coming from a wide variety of IPs.  Does anyone know what services run off this port?  I've found very little information on the net and was hoping one of the networking pros here could enlighten me.  

Thanks!

0
Comment
Question by:ppuleo
2 Comments
 
LVL 8

Accepted Solution

by:
Ubuntop earned 375 total points
ID: 20742551
5150 is a listener port for Ascend Tunnel Management Protocol.  Ascend is a way for Dial-in users to make a connection to an ISP sever, then the ISP provide the user an address from his home subnet.  5150 is the listening port for the ISP to set this "virtual network" up.

You are probably seeing hits on 5150 because there is a recent vulnerability discovered in this system.

Here are details on Ascend Tunnel management protocol.
http://www.rfc-archive.org/getrfc.php?rfc=2107
0
 

Author Comment

by:ppuleo
ID: 20758746
Thanks Ubuntop.  What's odd is it is coming in on our 2nd IP.  We have two connections to two separate IPs and use this one only for outgoing HTTP and HTTPS.  I'm having no trouble blocking it, it just was odd how it suddenly increased in frequency.
0

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
In this article, we’ll look at how to deploy ProxySQL.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question