Port 447 Scans

"[email protected]" <[email protected]> Tue, 13 Dec 2005 14:28:24 GMT

Newsgroups	gmane.comp.security.intrusions
Message-ID	<[email protected]>

Been seeing some "low and slow" scans for port 447 (DDM-Distributed File Management), anyone know why?   Stan Carey SNORT Packet:[**] SYN/ACK on ports 6666 - 7000  - Possible IRC Session [**]
12/13-09:06:35.851561 60.190.127.89:7000 -> my.network.42.153:447
TCP TTL:109 TOS:0x0 ID:44419 IpLen:20 DgmLen:48 DF
***A**S* Seq: 0x2A444692  Ack: 0x2D53442A  Win: 0x2238  TcpLen: 28
TCP Options (4) => MSS: 1460 NOP NOP SackOK  
_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions