strange port scan activity to tcp 18xxx?

[Vincent Chen <vctw () yahoo com>]

Hi, all

I received a lot of port scan activity to tcp port
18xxx like this since upgrade to snort 2.x.

spp_portscan: PORTSCAN DETECTED to port 18735 from
xxxxx

Does this mean someone is really looking for something
or just simply false alarm?


Thanks,



-----------------------------------------------------------------
每天都 Yahoo!奇摩
海的顏色、風的氣息、愛你的溫度，盡在信紙底圖
http://tw.promo.yahoo.com/mail_premium/stationery.html


-------------------------------------------------------
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users