increased scans on udp port 0

[email protected] Tue, 20 Dec 2005 11:22:19 -0500
Newsgroups gmane.comp.security.intrusions
Message-ID <[email protected]>
I am a newbie to the list, so pardon my question if it's been posted before.
While monitoring my perimeter/border router Snort logs, I have noticed a
dramatic increase over the last two days of port scans to udp port 0 on two
of our leased ISP  IP address ranges.  Is this cyclic in nature or should I
be really concerned about recon, etc?  It gets blocked at the firewall, but
is an increase like I have never seen.

 

Thanks,

Jeff Arey

_______________________________________________
Intrusions mailing list
[email protected]
http://www.dshield.org/mailman/listinfo/intrusions