Threat Level: green Handler on Duty: Tom Webb

SANS ISC: UDP Ports 54929, 46304, 23010 - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
UDP Ports 54929, 46304, 23010

Another reader, Tony W. was checking his logs for any activity referenced in Tony Carothers diary on UDP Port 21713.  What he found were the three ports UDP 54929, 46304 and 23010 all started being hit about the same time on his network.  When you look at the DShield graphs of these three, they are very similar to the trend on 21713.  Is there any coorelation?  I have no idea at this point.  However, while your checking your logs for 21713, look and see if these ports are showing up as well.  If anyone can get packet captures for any of these, that would be most helpful!

 

 

Lorna

165 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!