Security Incidents mailing list archives

Port 9200/UDP Scan


From: "Portnoy, Gary" <gportnoy () BELENOSINC COM>
Date: Thu, 25 Jan 2001 15:26:06 -0500

Greetings,

Last Saturday I noticed a scan of one of my networks on port 9200/UDP, from
64.31.88.40 (064-031-088-040.inaddr.vitts.com) port 1051/UDP.  Then
yesterday, another scan, same source, same port, just a much wider range, it
looks like it went up and down 64.241.x.x and 64.242.x.x at least.
According to http://www.isi.edu/in-notes/iana/assignments/port-numbers, it's
a "wap-wsp 9200/udp WAP connectionless session service".  Is this just a
misconfigured application?  Has anyone else seen this?

Thanks

Gary Portnoy
Network Administrator
gportnoy () belenosinc com


Current thread: