[Dshield] port scans 32769 to 33718
DoShelp at DoShelp.com
Thu Dec 25 19:00:25 GMT 2003
According to portsdb.org, this is "filenet-rpc" suggesting maybe some new
form of P2P network?, You can also look at
http://www.doshelp.com/trojanports.htm Where I have a large list of known
trojans. There are also links to regular ports and research services at the
bottom of the page.
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
Behalf Of Barton L. Phillips
Sent: Thursday, December 25, 2003 1:47 PM
To: list at dshield.org
Subject: [Dshield] port scans 32769 to 33718
I received about 20 port scans in the range 32769 to 33717 or 33718 UDP
today. This is highly irregular. The scans are coming from many
different IP addresses. A sample of the IP addresses follows:
188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168,
22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206 ...
Has anyone else seen a larger than normal amount of port scans in this
range? And if so what is it?
Barton L. Phillips
Applied Technology Resources, Inc.
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
More information about the list