Security Incidents mailing list archives

udp port 500 scans

From: Blake Frantz <blake () MC NET>
Date: Thu, 21 Dec 2000 10:26:42 -0600

what is this?  we have been seeing this traffic quite a bit lately.

Wed Dec 20 12:29:02 2000 x.x.x.x/500 -> y.y.y.y/500 udp
Wed Dec 20 12:29:02 2000 x.x.x.x/500 -> y.y.y.y/500 udp
Wed Dec 20 12:29:02 2000 x.x.x.x/500 -> y.y.y.y/500 udp
Wed Dec 20 12:29:02 2000 x.x.x.x/500 -> y.y.y.y/500 udp
Wed Dec 20 12:29:02 2000 x.x.x.x/500 -> y.y.y.y/500 udp
Wed Dec 20 12:29:02 2000 x.x.x.x/500 -> y.y.y.y/500 udp
Wed Dec 20 12:29:02 2000 x.x.x.x/500 -> y.y.y.y/500 udp

thanks in advance.

blake

========================================================================
"I'm sure my men can handle one little penguin." "No, Mr Gates, your men
are already dead."

Current thread:

udp port 500 scans Blake Frantz (Dec 21)
- Re: udp port 500 scans Jeff (Dec 21)
- Re: udp port 500 scans Greg Woods (Dec 21)
  - Unknown web log entry - new FrontPage exploit? Michael Katz (Dec 21)
    - Re: Unknown web log entry - new FrontPage exploit? TJ Jablonowski (Dec 22)
  - Re: udp port 500 scans TJ Jablonowski (Dec 21)
- <Possible follow-ups>
- Re: udp port 500 scans Green, Art (MED) (Dec 21)