UDP traffic to port 50368

Published: 2005-10-24
Last Updated: 2005-10-24 17:39:34 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
A reader (Bill) reported that he is seeing a substantial increase of UDP port 50368 traffic getting blocked by the firewall. The traffic appears to originate from Europe, and uses numerous source ports (but many of them are "well known").

Here a quick sample of sources and source ports

No idea what's causing that. We have almost no other traffic to this port in our database. If you see any outbound traffic like that, let us know.

0 comment(s)


Diary Archives