Thinking...
[get complete service list]
Top of page
Port Information
Protocol Service Name
tcp msnp MSN Messenger Protocol
udp msnp MSN Messenger Protocol
Top IPs Scanning
Today Yesterday
162.19.80.39 (17)79.124.59.10 (14)
109.205.213.36 (7)42.112.110.228 (14)
222.186.13.133 (5)109.205.213.36 (8)
194.180.48.23 (4)183.57.179.136 (5)
36.49.87.130 (3)106.75.137.230 (4)
111.227.78.3 (2)109.205.213.69 (4)
183.57.179.136 (2)8.222.188.169 (4)
154.197.56.163 (2)220.186.210.3 (4)
106.75.137.230 (2)222.175.106.135 (3)
98.13.137.91 (2)123.181.26.3 (3)
Port diary mentions
URL
"Death" of Internet Services
Top of page
User Comments
Submitted By Date
Comment
Doug Smith 2009-10-04 18:34:56
http://www.bekkoame.ne.jp/~s_ita/index.html lists this as associated with: W32.Mytob, Bifrose, which Symantec describes as a mass-mailing worm.
Timo Steffens 2009-10-04 18:34:27
In the last two months we noticed waves of accesses to 1863/UDP. Arbor mentions 1863 as port for C&C-servers of a small botnet. The scans (or accesses) to 1863 seem to focus on a small part of the address space (rather than cover the whole possible address space).
Top of page
CVE Links
CVE # Description
Top of page