Re: Scans on UDP 38072

["PaulM" <pmelson () gmail com>]

-----Original Message-----
Subject: [fw-wiz] Scans on UDP 38072

> Recently I've noticed today quite a few denied connections for UDP/38072
and occasionally for TCP/38072 
> on two different firewalls. I've searched for some information on this
protocol but I couldn't find 
> anything relevant. Most of the connections come from dynamically assigned
IP addresses. For some IPs 
> there are several connection attempts, each 1 min. 25 seconds apart. Did
anyone see this kind of traffic 
> in their logs?

More RPC / Windows Messenger scanning/spamming.

http://www.dshield.org/port_report.php?port=38072


PaulM
 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards