[Dshield] Port 16387

Stephane Grobety security at admin.fulgan.com
Tue Mar 23 12:44:32 GMT 2004


BM> By any chance, do most of the incoming packets have source port
BM> 4000? If so, you could be looking at Witty worm traffic.

Witty uses a random destination port... I should know: it blew up my
server...

Good luck,
Stephane




More information about the list mailing list