Security Incidents mailing list archives

Re: New UDP port probed (36970)


From: killy <killfactory () gmail com>
Date: Mon, 11 Dec 2006 18:29:28 -0500

http://www.dshield.org/port_report.php?port=36970&recax=1&tarax=2&srcax=2&percent=N&days=40

I found this.

Also, assuming those are actually the real source IP's,
The first IP is Canada
The Second is India
The third China
The fourth is Taiwan

Not really a pattern.

Nothing, on these ip on whois.abuse.net.





On 12/8/06, Walter C. Daugherity <daugher () cs tamu edu> wrote:
Today's log shows a new UDP port (36970) probed by

24.85.239.112
125.22.34.118
59.70.136.92
140.113.90.231

etc., and I did not find that port in various lists of ports used by viruses, Trojans, backdoors, etc.

Anybody know what this is?
















--
Walter C. Daugherity                       Dept. of Computer Science
E-mail: daugher () cs tamu edu                Texas A & M University
http://faculty.cs.tamu.edu/daugher/        College Station, TX 77843-3112
             ---Not an official document of Texas A&M---


------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
World renowned security experts reveal tomorrow's threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------------




--
If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke

------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas. World renowned security experts reveal tomorrow's threats today. Free of vendor pitches, the Briefings are designed to be pragmatic regardless of your security environment. Featuring 36 hands-on training courses and 10 conference tracks, networking opportunities with over 2,500 delegates from 40+ nations.
http://www.blackhat.com
------------------------------------------------------------------------------


Current thread: