Security Incidents mailing list archives
Re: New UDP port probed (36970)
From: killy <killfactory () gmail com>
Date: Mon, 11 Dec 2006 18:29:28 -0500
http://www.dshield.org/port_report.php?port=36970&recax=1&tarax=2&srcax=2&percent=N&days=40 I found this. Also, assuming those are actually the real source IP's, The first IP is Canada The Second is India The third China The fourth is Taiwan Not really a pattern. Nothing, on these ip on whois.abuse.net. On 12/8/06, Walter C. Daugherity <daugher () cs tamu edu> wrote:
Today's log shows a new UDP port (36970) probed by 24.85.239.112 125.22.34.118 59.70.136.92 140.113.90.231 etc., and I did not find that port in various lists of ports used by viruses, Trojans, backdoors, etc. Anybody know what this is? -- Walter C. Daugherity Dept. of Computer Science E-mail: daugher () cs tamu edu Texas A & M University http://faculty.cs.tamu.edu/daugher/ College Station, TX 77843-3112 ---Not an official document of Texas A&M--- ------------------------------------------------------------------------------ This List Sponsored by: Black Hat Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas. World renowned security experts reveal tomorrow's threats today. Free of vendor pitches, the Briefings are designed to be pragmatic regardless of your security environment. Featuring 36 hands-on training courses and 10 conference tracks, networking opportunities with over 2,500 delegates from 40+ nations. http://www.blackhat.com ------------------------------------------------------------------------------
-- If you spend more on coffee than on IT security, you will be hacked. What's more, you deserve to be hacked. -- former White House cybersecurity czar Richard Clarke ------------------------------------------------------------------------------ This List Sponsored by: Black HatAttend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas. World renowned security experts reveal tomorrow's threats today. Free of vendor pitches, the Briefings are designed to be pragmatic regardless of your security environment. Featuring 36 hands-on training courses and 10 conference tracks, networking opportunities with over 2,500 delegates from 40+ nations.
http://www.blackhat.com ------------------------------------------------------------------------------
Current thread:
- New UDP port probed (36970) Walter C. Daugherity (Dec 09)
- Re: New UDP port probed (36970) Tim (Dec 10)
- Re: New UDP port probed (36970) killy (Dec 11)
- <Possible follow-ups>
- Re: Re: New UDP port probed (36970) w1ngz73 (Dec 11)
- Re: Re: New UDP port probed (36970) anonymous (Dec 11)
- RE: New UDP port probed (36970) McGowan, Jeremy (Dec 11)
- Re: Re: New UDP port probed (36970) rpan (Dec 12)
- Worm attack on our network this morning -- anyone else see this? David Gillett (Dec 13)