[Dshield] Port 3410/tcp

Johannes B. Ullrich jullrich at sans.org
Thu Jan 29 03:28:00 GMT 2004


port 3410 is used by the Optix backdoor. It is a commonly scanned for
port. I guess its just your turn today ;-)


On Wed, 2004-01-28 at 18:50, Guenter Hopf wrote:
> hi,
> 
> within the last hour i've seen a huge spike in port 3410/tcp packets
> from ~ 70 sources, compared to 0 such packets i have over the last days.
> anyone else experiencing this? and does anyone know whats behind it?
> 
> cheers,
> guenter
-- 
CTO SANS Internet Storm Center               http://isc.sans.org
phone: (617) 837 2807                          jullrich at sans.org 

contact details: http://johannes.homepc.org/contact.htm
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20040128/047ba520/attachment.bin


More information about the list mailing list