UDP to port 500

From: Edmund Ronayne (edmund.ronayneat_private)
Date: Thu Jul 03 2003 - 06:07:04 PDT

  • Next message: jay krous: "msmsgs.exe /passportlogon /delaysync /shortpackets"

    All,
    
    	Is anybody seeing lots of UDP scans from 69.11.200.49 & 50.
    
    	It started last night. If you try to connect to it on port 80 it also
    trys to sends a UDP packet back.
    
    	The netblock seems to be owned by BHOSTED.NET. Had a quick look their
    website the contact us page redirects to https which seems to be down at
    the moment
    
    
    Regards
    
    Ed
    
    
    
    ----------------------------------------------------------------------------
    Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the 
    world's premier technical IT security event! 10 tracks, 15 training sessions, 
    1,800 delegates from 30 nations including all of the top experts, from CSO's to 
    "underground" security specialists.  See for yourself what the buzz is about!  
    Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Thu Jul 03 2003 - 08:01:30 PDT