Am I being attacked on port 3625? Hmm..

[narcisis]

Hey guys, got a bit of a problem here.

I run blackice server protection as my firewall and I keep picking up UDP port probes on port 3625. Is this a vulnerable port to some service or something?

About 100 unique hosts per day, if not more, hit me on that port about 50 times daily. Wth is this? I've blocked 3625 off but they still hit it.. looking for something..

Any ideas?

[ua549]

Just keep the ports locked and you'll be OK.
There are crackers scanning for open ports all the time.
You are fortunate the scans are not more frequent (1 per minute or more).

[gameboy1234]

No idea what this is, sorry. I did a google search for "port 3625", I found a couple of email messages that had port # 3625 in the header (as something like "received from x.x.x.x port 3625") and I found one circle mud that had it's login port at 3625. IANA lists it as belonging to some app called "volley".

I think it might be a cracker looking for zombies, because that port is in the "user allowed" space, rather than in the space for system processess (less than 1024). But who knows really. Just do as UA says and keep that firewall up!