bobp+dshield at webster.tsc.com
Wed Mar 23 19:39:13 GMT 2005
"Paul Marsh" <pmarsh at nmefdn.org> reports:
> I've been noticing the following IP's scanning me with the
> following source ports.
> 220.127.116.11 33435 udp
> 18.104.22.168 33436 udp
> 22.214.171.124 33437 udp
> 126.96.36.199 33438 udp
> 188.8.131.52 33440 udp
> The question is, what are these scans?
Probably one of these (or similar) products:
There are a number of products like these that use traceroutes for geolocation
or path optimization.
USA Today uses (or used at one time) one of these products or something similar.
Try browsing <www.usatoday.com> and watch the traceroutes come flying in.
Bob Poortinga K9SQL
Bloomington, Indiana US
More information about the list