Incidents
New UDP port probed (36970) Dec 08 2006 08:46PM
Walter C. Daugherity (daugher cs tamu edu) (2 replies)
Re: New UDP port probed (36970) Dec 11 2006 11:29PM
killy (killfactory gmail com)
http://www.dshield.org/port_report.php?port=36970&recax=1&tarax=2&srcax=
2&percent=N&days=40

I found this.

Also, assuming those are actually the real source IP's,
The first IP is Canada
The Second is India
The third China
The fourth is Taiwan

Not really a pattern.

Nothing, on these ip on whois.abuse.net.

On 12/8/06, Walter C. Daugherity <daugher (at) cs.tamu (dot) edu [email concealed]> wrote:
> Today's log shows a new UDP port (36970) probed by
>
> 24.85.239.112
> 125.22.34.118
> 59.70.136.92
> 140.113.90.231
>
> etc., and I did not find that port in various lists of ports used by viruses, Trojans, backdoors, etc.
>
> Anybody know what this is?
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> --
> Walter C. Daugherity Dept. of Computer Science
> E-mail: daugher (at) cs.tamu (dot) edu [email concealed] Texas A & M University
> http://faculty.cs.tamu.edu/daugher/ College Station, TX 77843-3112
> ---Not an official document of Texas A&M---
>
>
> ------------------------------------------------------------------------
------
> This List Sponsored by: Black Hat
>
> Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
> World renowned security experts reveal tomorrow's threats today. Free of
> vendor pitches, the Briefings are designed to be pragmatic regardless of your
> security environment. Featuring 36 hands-on training courses and 10 conference
> tracks, networking opportunities with over 2,500 delegates from 40+ nations.
>
> http://www.blackhat.com
> ------------------------------------------------------------------------
------
>
>

--
If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- former White House cybersecurity czar Richard Clarke

------------------------------------------------------------------------
------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
World renowned security experts reveal tomorrow's threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------
------

[ reply ]
Re: New UDP port probed (36970) Dec 10 2006 02:51AM
Tim (tim-forensics sentinelchicken org)


 

Privacy Statement
Copyright 2010, SecurityFocus