<a href="http://g.adspeed.net/ad.php?do=clk&zid=14678&wd=728&ht=90&pair=as" target="_top"><img style="border:0px;" src="http://g.adspeed.net/ad.php?do=img&zid=14678&wd=728&ht=90&pair=as" alt="i" width="728" height="90"/></a>

Nmap Security Scanner

Docs
Security Lists

Full Disclosure

More
Security Tools

Packet crafters

More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:

edgeos

Firewall Wizards: Re: Scans on UDP 38072

Re: Scans on UDP 38072

From: PaulM <pmelson_at_gmail.com>
Date: Fri, 27 Oct 2006 16:55:40 -0400

-----Original Message-----
Subject: [fw-wiz] Scans on UDP 38072

> Recently I've noticed today quite a few denied connections for UDP/38072
and occasionally for TCP/38072
> on two different firewalls. I've searched for some information on this
protocol but I couldn't find
> anything relevant. Most of the connections come from dynamically assigned
IP addresses. For some IPs
> there are several connection attempts, each 1 min. 25 seconds apart. Did
anyone see this kind of traffic
> in their logs?

More RPC / Windows Messenger scanning/spamming.

http://www.dshield.org/port_report.php?port=38072

PaulM

_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Received on Oct 29 2006

This message: [ Message body ]
Next message: Ofer Shezaf: "ModSecurity 2.0, A Core Rule Set and Console now available"
Previous message: Adrian Grigorof: "Scans on UDP 38072"
In reply to: Adrian Grigorof: "Scans on UDP 38072"
Next in thread: Devdas Bhagat: "Re: Cisco PIX log analyzer, parser, reporter?"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]