[unisog] What would cause an alert like this?

Thomas DuVally tduvally at brown.edu
Wed Feb 16 19:18:08 GMT 2005


On Wed, 2005-02-16 at 10:50 -0700, Clyde Hoadley wrote:
> What would cause this?  The "nnn.nnn.xxx.153" is a Windows XP
> computer.  The desktop support technician reported that he didn't
> find anything wrong with the workstation.  He did say it had a
> game called "America's Army" installed.  Would that have caused
> this?  I've only seen this alert once.
> 
>  >02/14/2005 09:20:04.128 - 	Probable Port Scan -
>  >Source:nnn.nnn.xxx.153, 1480, WAN - 	Destination:255.255.255.255,
>  >7787, LAN - 	UDP scanned port list, 8777, 7778, 7779, 7780, 7781,
>  >7782, 7783, 7784, 7785, 7786 - 	
> 

These are all ports used by many online games, including America's Army.

-- 
TJ Duvally

GPG fingerprint = FB59 8265 0865 0CB8 94B5 FC26 F573 F09C 15F2 33F6
http://www.gnupg.org - 'Cause they read your email!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 240 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/unisog/attachments/20050216/f4a89d30/attachment-0002.bin


More information about the unisog mailing list