UDP Port Scan?

Captain Fizz

Captain Fizz

Ascalonian Squire

Join Date: Jan 2006

Scotland

TDB

E/Me

Hello folks,

I searched for "udp port scan" but it came up with nothing...

After checking my hardware firewall's logs I came accross this:
Quote:
Internet Domain: 206-127-156-126.plaync.com

Internet Address: 206.127.156.126

4 times this week

UDP Port Scan Detected, Packet Dropped
Has anyone else had this?
Or is this standard?

Just curious why it picked this up.
The IG's are not known for false positives...

Cheers.

jesh

jesh

Forge Runner

Join Date: May 2005

San Diego, CA

Penguin Village

Mo/

Uh.. it looks like plaync had someone scanning their ports and dropped the packets. I don't see how this matters at all. XD

Captain Fizz

Captain Fizz

Ascalonian Squire

Join Date: Jan 2006

Scotland

TDB

E/Me

So how would THEIR ports being scanned end up in MY ports getting scanned?

That makes no sense.

If PlayNC were getting scanned, then PlayNC's firewalls would show stuff like this.
Not my own firewall at home...

This shows that PlayNC servers scanned MY ports.

=HT=Ingram

=HT=Ingram

Forge Runner

Join Date: Feb 2005

Anchorage Alaska

Haz Team [HT]

R/W

that's those Koreans trying to take over the world after all... Not surprised...
/sarcasm off

Now in all seriousness, they are prob using the client software to find better ways to optimized their connections for their customers... A standard port scan report would be one such way to find more universally open ports to use for the client.
Maybe some warning if it was being done would have been nice. But in the end its already happened. And yes I have similar listings in my firewall logs...

Those addresses are the Austin Texas servers for the record.
NetRange: 206.127.144.0 - 206.127.159.255
If you feel this was a violation of agreement or abuse of client trust contact:
+1(512) 498-4038 or email: [email protected]

Make sure you have your activity logs to present to them and ask for an explaination.

In the end however I don't think its that big a deal...

dronex

dronex

Lion's Arch Merchant

Join Date: Dec 2005

Mo/

paranoia anyone -.- ? who cares what they scan

Captain Fizz

Captain Fizz

Ascalonian Squire

Join Date: Jan 2006

Scotland

TDB

E/Me

Just wondering if it was common or somone spoofing.
If other peeps are getting it too - I'm happy.

@dronex - I would be impressed if I could actually become paranoid about anything. ^_^
(My disposition does not lend itself to me becoming paranoid)