Security Incidents mailing list archives

massive scans on 5634/tcp


From: Dominik Samuelis <checkpoint-fw1 () fschemie tu-darmstadt de>
Date: Wed, 27 Jun 2001 21:15:08 +0200

Hello,

Today, I had massive port scans on port 5634/tcp (15619 packets on my single
box as of now, coming from 255 distinct sources). Any clues what this could
be ?

Packet log: input DENY ppp0 PROTO=6 us.cable.modem:3247 217.0.224.94:5634
L=44 S=0x00 I=1 F=0x4000 T=110 SYN (#9)

TIA
Dominik


----------------------------------------------------------------------------


This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see:

http://aris.securityfocus.com


Current thread: