OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: New UDP port probed (36970)

From: McGowan, Jeremy (jmcgowanglobalspec.com)
Date: Mon Dec 11 2006 - 08:37:45 CST

Ares, which is a P2P Program, most likely.

-Jeremy

-----Original Message-----
From: listbouncesecurityfocus.com [mailto:listbouncesecurityfocus.com]
On Behalf Of Tim
Sent: Saturday, December 09, 2006 9:51 PM
To: Walter C. Daugherity
Cc: incidentssecurityfocus.com
Subject: Re: New UDP port probed (36970)

Hello Walter,

> Today's log shows a new UDP port (36970) probed by
>
> 24.85.239.112
> 125.22.34.118
> 59.70.136.92
> 140.113.90.231
>
> etc., and I did not find that port in various lists of ports used by
> viruses, Trojans, backdoors, etc.
>
> Anybody know what this is?

Is there any pattern to the source ports?

tim

------------------------------------------------------------------------
------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las
Vegas.
World renowned security experts reveal tomorrow's threats today. Free of

vendor pitches, the Briefings are designed to be pragmatic regardless of
your
security environment. Featuring 36 hands-on training courses and 10
conference
tracks, networking opportunities with over 2,500 delegates from 40+
nations.

http://www.blackhat.com
------------------------------------------------------------------------
------

------------------------------------------------------------------------------
This List Sponsored by: Black Hat

Attend the Black Hat Briefings & Training USA, July 29-August 3 in Las Vegas.
World renowned security experts reveal tomorrow's threats today. Free of
vendor pitches, the Briefings are designed to be pragmatic regardless of your
security environment. Featuring 36 hands-on training courses and 10 conference
tracks, networking opportunities with over 2,500 delegates from 40+ nations.

http://www.blackhat.com
------------------------------------------------------------------------------