[Dshield] port probe increase on 3531
mbruyere at ezemcanada.com
Tue Dec 2 19:44:33 GMT 2003
I saw an increase of port probing on the 3531 port. Someone know
what this can be?
There is 2 pattern that I noted, the firt is Source port is always 3531 as
well as dest port and the other "kind" of probes are coming from source
around 2300 and up.
It kinda dropped since 30 nov 2003. This date was the highest peak.
They were coming mainly from
18.104.22.168 (39 hits)
22.214.171.124 (13 hits)
126.96.36.199 (16 hits)
188.8.131.52 (13 hits)
184.108.40.206 (10 hits)
These are only from the 30 nov.
More information about the list