|
Security Incidents
mailing list archives
Source port 3392
From: John Kristoff <jtk () DEPAUL EDU>
Date: Thu, 31 Aug 2000 16:37:22 -0500
I've been seeing a handful of hosts all using TCP source port 3392
trying to connect to random destinations (ports and IPs). Has anyone
seen any of these lately? It seems awfully strange. I haven't taken
the opportunity to start looking into the details of the packets (I've
felt I have better things to do :-). Some of the sources I've seen so
far include:
209.61.141.199
216.15.205.63
206.161.205.30
206.86.0.23
209.3.225.247
208.190.130.81
130.238.5.2
207.229.143.41
John
By Date
By Thread
Current thread:
- Source port 3392 John Kristoff (Sep 01)
|