[Dshield] What's up with 11784?

Jeff Kell jeff-kell at utc.edu
Sun Jun 26 05:17:36 GMT 2005


Jeff Kell wrote:
 
>>This odd port 11784 has shown up in my top ten list the past few
>>days.  Any idea what's up? 

Umm.. nevermind.. must be an address spoof in a torrent or something similar, it's only one target accounting for all the traffic.  Got this a little while ago:

Port Summary
Port	Packets	Sources	Targets	Service	Name
135	17182	5488	759	epmap  	DCE endpoint resolution  
11784	21438	1723	2	 	 
17313	6859	1461	1	 	 
37687	5996	1393	1	 	 
445	7503	994	545	microsoft-ds  	Win2k+ Server Message Block  
139	1447	216	448	netbios-ssn  	NETBIOS Session Service  

So still somewhat of a mystery, but doesn't appear to be anything significant.

Jeff


More information about the list mailing list