[Dshield] port probe increase on 3531

Bruyere, Michel mbruyere at ezemcanada.com
Tue Dec 2 19:44:33 GMT 2003


Hi, 
	I saw an increase of port probing on the 3531 port. Someone know
what this can be? 
There is 2 pattern that I noted, the firt is Source port is always 3531 as
well as dest port and the other "kind" of probes are coming from source
around 2300 and up.
It kinda dropped since 30 nov 2003. This date was the highest peak.

They were coming mainly from 
205.206.3.101 (39 hits)
205.206.252.147 (13 hits)
199.243.212.250 (16 hits)
142.217.180.190 (13 hits)
24.203.30.133 (10 hits)

These are only from the 30 nov.

M.Bruyere







More information about the list mailing list