[Dshield] Getting a lot of port 3651

John Sage jsage at finchhaven.com
Fri Sep 19 21:13:53 GMT 2003


On Fri, Sep 19, 2003 at 04:14:06PM -0400, Dan wrote:
> Hello all,
> I am getting a lot of hits on port 3651 from a LOT of different sources.
> Anyone else seeing this?
> -Dan

You give no context, whatsoever..

/* snip */
Received: from DBDigital (hbge-216-222-238-160.dsl.hbge.epix.net
/* snip */

I'm betting you're on DSL.

By chance did you just get a new IP address?

Could be what I call "dialup cruft": P2P or filesharing of somesort
intended for the previous occupant of the IP address you have now.

One thought, anyway...

- John
"Warning: time of day goes back, taking countermeasures."
John Sage
InfoSec Groupie
ABCD, EFGH, IJKL, EmEnOh, Pplus+, Mminus-
ATTENTION: this message is privileged communication. If you read it
even though you aren't supposed to, you're a poopy-head.

More information about the list mailing list