[34249] in North American Network Operators' Group
Re: Wierd portscans
daemon@ATHENA.MIT.EDU (Avleen Vig)
Wed Jan 31 21:28:39 2001
Date: Thu, 1 Feb 2001 02:26:01 +0000 (GMT)
From: Avleen Vig <avleen@ivision.co.uk>
To: Elric <elric@dse-nets.com>
Cc: North America Network Operators Group Mailing List <nanog@merit.edu>
In-Reply-To: <Pine.LNX.4.30.0101311512080.30188-100000@Yog-Sothoth.dse-nets.com>
Message-ID: <Pine.GSO.4.30.0102010225070.8990-100000@avengers>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
On Wed, 31 Jan 2001, Elric wrote:
>
>
> I've been going though my scanlogs and in the past couple of days I have
> seen someone trying to come in. Thier not getting in but im noticing them
> hitting a number of ports over and over. Primarily attempting udp port 0,
> but also 35072, 41612, and 63240. I've done searches on Google, Dejanews,
> Bugtraq etc but can't seem to find out what these ports are. Just
> wondering if anyone had come across them ever....
Sound like they would be traceroutes from a *nix OS to me.
