Here you go ....
It looks like a Linkproof device doing a proximity check.

Source = http://www.sans.org/y2k/031401.htm

Cheers,

-Z





----- Original Message -----
From: "william.wells" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, February 20, 2002 6:11 PM
Subject: Port 37852


> I've started to see attempts to connect to port 37852. The attempts occur
> perhaps generally once, sometimes twice, per hour and have been occurring
> over several days but only in the afternoon or towards the end of the
> business day. I have yet to have a repeated IP address although there has
> been a rare cases where only the 3th byte of the IP address changes. In
most
> cases, the IP addresses are completely different. In all but 1 case, there
> were no other attempts on other (unsupported) ports; that other attempt
was
> made to a very non-adjacent port.
>
> Any comments?
>
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to