[Dshield] Port 3527

Tom Fischer tomfi at tomfi.net
Thu Jun 30 13:20:27 GMT 2005


Hi,

On Thu, Jun 30, 2005 at 07:49:32AM -0400, Joel Esler wrote:
> Anyone else noticing some port 3527 scanning?

yep, a few days ago (26./27. June) - cause some of the attackers 
scanned TCP/10000 as well, I would guess it's related to the latest
Veritas Backup Exec Bugs [1]

[1] http://seer.support.veritas.com/docs/277429.htm
[2] http://www.frsirt.com/exploits/20050625.backupexec_agent.pm.php
...

-- 
Tom Fischer


More information about the list mailing list