Update: MGLNDD_* Scans

    Published: 2024-02-24
    Last Updated: 2024-02-25 08:43:36 UTC
    by Didier Stevens (Version: 1)
    0 comment(s)

    Almost 2 years ago, a reader asked us about TCP connections they observed. The data of these TCP connections starts with "MGLNDD_": "MGLNDD_* Scans".

    Reader Michal Soltysik reached out to us with an answer: MGLN is Magellan, RIPE Atlas Tools. RIPE Atlas employs a global network of probes that measure Internet connectivity and reachability.

    Thanks to Michal for explaining this in a video.

    Didier Stevens
    Senior handler
    Microsoft MVP

    0 comment(s)


      Diary Archives