Great Circle Associates Firewalls
(April 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: UDP probes to ports in the 334xx range ???
From: John Pettitt <jpp @ software . net>
Date: Thu, 27 Apr 1995 16:57:19 +0100
To: Firewalls @ GreatCircle . COM

Here is a log snippet from my router ...

deny: UDP from 192.100.81.107.62128 to 204.69.144.1.33468 
deny: UDP from 192.100.81.107.62128 to 204.69.144.1.33469 
deny: UDP from 192.100.81.107.62128 to 204.69.144.1.33470 
deny: UDP from 204.118.198.11.34466 to 204.69.144.1.33465 
deny: UDP from 204.118.198.11.34466 to 204.69.144.1.33466 
deny: UDP from 204.118.198.11.34466 to 204.69.144.1.33467 
deny: UDP from 158.197.36.2.34069 to 204.69.144.1.33468 
deny: UDP from 158.197.36.2.34069 to 204.69.144.1.33469 
deny: UDP from 158.197.36.2.34069 to 204.69.144.1.33470 
deny: UDP from 158.197.36.2.34073 to 204.69.144.1.33468 
deny: UDP from 158.197.36.2.34073 to 204.69.144.1.33469 
deny: UDP from 158.197.36.2.34073 to 204.69.144.1.33471 
deny: UDP from 158.197.36.2.34073 to 204.69.144.1.33472 
deny: UDP from 158.197.36.2.34073 to 204.69.144.1.33473 
deny: UDP from 198.93.4.10.55921 to 198.67.38.254.33477 
deny: UDP from 198.93.4.10.55921 to 198.67.38.254.33478 
deny: UDP from 198.93.4.10.55921 to 198.67.38.254.33479 

So I'm at a loss - what are all the probes to high UDP ports
about?  Is this a scanning tool (I see netcom and the well
in the source IPs) or some application I've not met before?


John Pettitt                                          jpp @
 software .
 net
VP Engineering                                        +1 415 473 3065 (V)
CyberSource Corporation                               +1 415 473 3066 (F)



Follow-Ups:
Indexed By Date Previous: Trust Us
From: padgett @ tccslr . dnet . mmc . com (A. Padgett Peterson, P.E. Information Security)
Next: Re: TRUST US
From: "Simon J. Gerraty" <sjg @ frodo . dn . itg . telecom . com . au>
Indexed By Thread Previous: Lloyd's Firewall info needed
From: Ron Kuris <rk @ Unify . Com>
Next: Re: UDP probes to ports in the 334xx range ???
From: Tim Keanini <blast @ worldbit . com>

Google
 
Search Internet Search www.greatcircle.com