Re: UDP 22 & 5632

[Mike Barkett <mbarkett () digex net>]

Sounds like PCAnywhere, or the byproducts thereof.

-MAB

On Wed, 5 Apr 2000, Aaron Turner wrote:

AT>Date: Wed, 5 Apr 2000 16:52:50 -0700 (PDT)
AT>From: Aaron Turner <aturner () vicinity com>
AT>To: firewall-wizards () nfr net
AT>Subject: [fw-wiz] UDP 22 & 5632
AT>
AT>
AT>I'm seeing a reoccuring pattern where a system will sequentially scan a
AT>network over and over and over (sometimes for hours) trying to connect to
AT>UDP 22 & 5632.  The source port is pretty static, always near (but higher
AT>than) 1024.
AT>
AT>Anyone with an idea of what this is?  It seems to be running on a Windows
AT>(most likely NT since the IP is in a co-lo) system.