Looking for some packets going to tcp/8520

Published: 2013-02-15
Last Updated: 2013-02-15 13:03:07 UTC
by Mark Hofman (Version: 1)
6 comment(s)

One of our readers has come across traffic leaving the network with a destination of CN and a destination port of tcp 8520.  

If you are seeing the same I'd like to know, even better if you have a capture of the traffic including the payload that would be great. 


Mark H 

6 comment(s)


Do you have IP ranges? I can search on tcp port, but not CN
61.131/16 should get you something. Unfortunately not able to provide a closer range. - MH
123.x.x.x generally - but 121.x.x.x through 125.x.x.x should be asia-pacific
Found this on Speednet:


This is not 2-way traffic? There is a callback of a specific group's RAT associated with that port.
Didn't find anything--I guess that's good

Diary Archives