[Dshield] Port 13000 ?

Bjørn Ruberg bjorn at ruberg.no
Thu Oct 31 22:05:18 GMT 2002


On Wed, 2002-10-30 at 20:04, Tim Tuck wrote:
> Hi all,
> 
> Is anybody seeing subnet scans to port 13000 from port 13000 ?
> 
> I have heaps in my logs this morning.
> 
> Any ideas on what port 13000 is ?

I experienced similar port scans. Snort identified them as "Shaft DDOS
Synflood", http://www.whitehats.com/info/IDS253

Bjorn




More information about the list mailing list