RE: Outbound Port scans, ports 3800+

[Meidinger Chris <chris.meidinger () badenit de>]

Can you find the process that is doing the scanning, i.e. owns the local
ports?

badenIT GmbH
System Support
 
Chris Meidinger
Tullastrasse 70
79108 Freiburg


-----Original Message-----
From: Dean Saxe [mailto:Dean.Saxe () magnetbanking com]
Sent: Tuesday, August 19, 2003 9:08 PM
To: security-basics () securityfocus com
Subject: Outbound Port scans, ports 3800+


I have a server which has recently started scanning two IP addresses on
ports 3800 and higher.  I can find no information online regarding any worms
or any malware which may be causing these port scans to occur.  Is anyone
aware of what may be causing this behavior?

Thanks in advance for your help.

-dhs


Dean H. Saxe
Senior Software Engineer
Web Application Security Team Lead
Magnet Communications
Dean.Saxe () magnetbanking com 
404.592.8515

CONFIDENTIALITY NOTICE:
This message and any attachment is solely for the use of the individual or
entity to which this message is addressed and contains information that is
confidential. If the reader of this message is not the intended recipient,
you are hereby notified that any review, retransmission, disclosure,
copying, distribution or the taking of any action in reliance on the
contents of this communication by persons or entities other than the
intended recipient is strictly prohibited. If you have received this email
in error, please contact the sender and delete the material from any
computer.

---------------------------------------------------------------------------
----------------------------------------------------------------------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------