Re: Multiple sources connecting to port 1024

[Dave Garn <dgarn () UU NET>]

Distributed/Coordinated scan?  1024/tcp is Netspy.  Who owns the
networks/IPBlocks that scanned you?  Do you see any common denomenator
(like they are all cablemodem boxen, all always-on connections, etc...)

dg


On Wed, 11 Oct 2000 janl () linpro no wrote:

> Hi,
>
> what does it mean when you see multiple connections to port 1024
> from several different networks in a span of 5 seconds?
>
> I count 42 connects, from aproximately 10-15 hosts.
>
> Nicolai
>
>
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr net
> http://www.nfr.net/mailman/listinfo/firewall-wizards


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards