Security Incidents: Re: Scanning Port UDP 4668

From: David Thiel <lx_at_redundancy.redundancy.org>
Date: Tue, 6 Aug 2002 11:30:37 -0700

On Tue, Aug 06, 2002 at 11:30:55AM -0400, Ken Grossman wrote:
> There's a P2P utility called EDonkey that uses UDP 466x and allows any
> edonkey user to publish an IP and port of a peer. Apparently, someone
> mistyped an IP address; hence the scans.

There's also an application called Overnet, a successor to eDonkey,
that relies on active scanning rather than predefined server lists.
It uses a similar port range to eDonkey. More info on www.overnet.com.

-david

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
Received on Aug 06 2002