What does this indicate (mini question)?

Question

System administration

Let's say there is a certain service (game server) that accepts connections from users. It has internal protection that no more than 1 user can connect per second. If someone else is trying to connect, it displays a corresponding message in the log, as well as the user's IP:Port.
So, isn't it strange that such a user (often connecting) first had such an IP and Port - 5.83.21.22: 4784
And after a few seconds such - 5.83.21.22: 64486
That is, the port changed in a few seconds. Can a normal user (not an attacker) achieve this?

Answer 1

Yes Easy. This is how TCP works - the port is chosen randomly on a new connection.

Answer 2

Certainly.
What is the problem?
A user connects to you, he has an ip address, in addition he specifies the port.
It is possible to specify different ports a thousand times per second.
You can specify a dozen different ports at the same time.