[Dshield] Bizarre Activity Spurt...

Robert Nelson nelsrob at mts.net
Fri Oct 14 22:33:29 GMT 2005


<snip>

Well, a little look-see shows these little bursts of activity at 4 hours, 13
minutes apart, a total of 5 spurts. The source ports changes on each new
spurt, but remains the same for the duration of the spurt. So I should be
seeing another rash of these in about 9 minutes... 

</snip>

Yessirree Bob, right on time. 20 hits each from 8 different addresses
(spoofed of course) for a total of 160 hits. All from port 52624 this time.

Robert




More information about the list mailing list