Update: MGLNDD_* Scans
Almost 2 years ago, a reader asked us about TCP connections they observed. The data of these TCP connections starts with "MGLNDD_": "MGLNDD_* Scans".
Reader Michal Soltysik reached out to us with an answer: MGLN is Magellan, RIPE Atlas Tools. RIPE Atlas employs a global network of probes that measure Internet connectivity and reachability.
Thanks to Michal for explaining this in a video.
Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com
Keywords:
0 comment(s)
×
Diary Archives
Comments