[plug] Port 3994 attack?

[Rob Davies]

Hi all,

None at that specific port, but a few in the 3K range 3369 plus others
with IP of 80. . . something. Have been getting these knocking at door for
a while since blaster reared its ugly head usually with a cyberkit 2.2
report from snort, but have removed this report from snort as it started
filling logs last week will re-enter and see what gets knocked from firewall.
ciao
Rob Davies
rob at rjdarts.com

"To converse is one scenario that separates us, from the Apes."

On Thu, 11 Sep 2003, William Kenworthy wrote:

> None showing here in a log grep for 3994 (iinet dialup) - lotsa port 135
> tho ...
>
> BillK
>
> On Thu, 2003-09-11 at 07:51, Stephen Boak wrote:
> > Lots of dropped traffic on TCP port 3994 from all over the place this
> > morning, and I can't find any references to what this port does. Some
> > sort of denial of service attack in progress?
> >
> > Steve
> >
> --
> William Kenworthy <billk at iinet.net.au>
>
>