Security Incidents mailing list archives

Port 10008


From: Joerg Weber <Joerg.Weber () jet-online de>
Date: Tue, 15 May 2001 11:10:07 +0200

Hello everyone,

my FW-Logs went insane last night with gazillions of connection attempts to
port 10008.
FW-1 does unfortunately not log dropped packets, so I've no idea about flags
et al, but the scan looks like this:
SourcePort = Increases with each scan
DestPort   = 10008

This looks like an automated tool to me, as the whole scan took about a
second or two.
Any ideas?

Thanks,

Joerg


Current thread: