[Dshield] Probes to 27960

Chateauneuf dupape at bellatlantic.net
Sun Mar 16 21:42:56 GMT 2003


At 10:31 AM 3/16/2003 -0900, Charles Hamby authored the following:
>Recently I've been seeing some odd probes to UDP 27960, and I was
>wondering if anyone else had seen any or if anyone could comment.
>Here's a sample from my logs:
>2003/03/15        04:07:48.18       I                       67.34.53.45
>adsl-34-53-45.mia.bellsouth.net   58571   192.168.0.5            27960
Maybe I'm missing something but these are all connections to inside 
addresses which means that the traffic has been forwarded. Again, maybe 
it's me but either you have a serious security flaw or this is traffic 
being received through your web browser or similar client. 



More information about the list mailing list