A reader (Bill) reported that he is seeing a substantial increase of UDP port 50368 traffic getting blocked by the firewall. The traffic appears to originate from Europe, and uses numerous source ports (but many of them are "well known").
Here a quick sample of sources and source ports 87.122.209.173/11069 No idea what's causing that. We have almost no other traffic to this port in our database. If you see any outbound traffic like that, let us know. I will be teaching next: Defending Web Applications Security Essentials - SANS Cyber Security West: March 2021 |
Johannes 4040 Posts ISC Handler Oct 24th 2005 |
Thread locked Subscribe |
Oct 24th 2005 1 decade ago |
Sign Up for Free or Log In to start participating in the conversation!