[Dshield] Port 16387

Stephane Grobety security at admin.fulgan.com
Tue Mar 23 12:44:32 GMT 2004

BM> By any chance, do most of the incoming packets have source port
BM> 4000? If so, you could be looking at Witty worm traffic.

Witty uses a random destination port... I should know: it blew up my

Good luck,

More information about the list mailing list