troubleshooting frequent channel disconnections, I switched to the User Peers view which shows IP:ports of channel connections.

In the channel I was having difficulty maintain a connection, I noticed several IPs in the red state with multiple ports. At least 4 users were observed with 4-10 ports in the red. I don't know if they ever turned green. I'll need to watch for that as I test more.

How and why might they be changing ports so frequently? Could this be some attempted exploit?