Anyone seeing activity on port 3396?

Posted on by

I’m getting many, many, many requests to my home PC on port 3396 today. My firewall software is keeping them from getting thru – I think – and my PC isn’t sending anything out – but it’s too weird not ask – any of you out there are seeing something like this today? I use Comcast digital cable, I’m used to a few script kiddies doing port scans daily, but the nonstop requests to 3396 is freaking me out.

7 thoughts on “Anyone seeing activity on port 3396?”

  1. It’s registered with IANA for the NetWare printer agent. I can’t find anything about known exploits for this port, though. I’ll check my firewall logs when I get home.

  4. Still seeing it. The feakest thing in the world. IPs from all sorts of different services trying to hit 3396. Weird. Might be somekind of DOS attack.

  5. I’m going to ask Comcast to assign me a new IP address tomorrow. Looks like Comcast maintains a database of MAC addresses to use to assign IP addresses. So even though I get my IP thru DHCP – I get the same address everytime.

    If I can change the IP I can probably lose the weird traffic.

    Don’t like this at all.

  6. Close the port!

    ppl are attacking this port!
    it seems ppl do a sortof l/p hack on this port!

    just CLOSE IT!

    dont ask how i know…
    if u know dutch… read this.
    i dont know anything more about it

    [12:39] Mike |: owja ken jij die hack manier over port 3396 ofzo al ? 😛
    [12:39] Mike |: is namelijk niet zo`n goede…
    [12:39] Mike |: je kunt moeilijk securen..
    [12:40] Mike |: omdat de sysop altijd dat account pakt van weak-pass.
    [12:40] Mike |: maja maybe was dat niet nodig om te zeggen 😉
    [12:40] satcom: 3396 ?

Comments are closed.