Security Incidents mailing list archives
Port 500 scans
From: klaus.dombrofsky () degussa com
Date: Mon, 7 Mar 2005 11:19:39 +0100
Hi, On my IDS i detected massive scans from single ip-addresses to different ip-addresses with source AND targetport 500. This scan uses alsmost the whole bandwith of our internet-access. Question: Does someone know any existing worm using a VPN-vulnerability ? best regards Klaus-Peter Dombrofsky its.on Global Network Services Security Management T +49.(0)8621 86 3057 M +49.(0)175 2617851 E-Mail: Klaus.Dombrofsky () degussa com GPG-Key available
Current thread:
- Port 500 scans klaus . dombrofsky (Mar 07)
- Re: Port 500 scans Valdis . Kletnieks (Mar 08)
- <Possible follow-ups>
- RE: Port 500 scans Britton, Jeff B. (Mar 08)