[Dshield] Port 2232

John Sage jsage at finchhaven.com
Wed Aug 6 14:55:37 GMT 2003


Just a thought:

On Tue, Aug 05, 2003 at 09:46:15AM -0400, Rodney.Meryweather at ctimi.com wrote:
> 
> Hey all
>       Has anyone seen a fair amount of traffic to port 2232 over the past
> few weeks. I have been seeing it on a daily basis and it normally comes in
> a port scan across my domain.

If you are using the term "port scan" accurately, it's not uncommon to
see a very wide range of ports being probed, not all of which have any
particular significance.

Why would someone probe any old port number at random?

No one said these kids are particularily bright...


- John
-- 
"Obviously, we do not want to leave zombies around."




More information about the list mailing list