Upswing UDP/7100

Published: 2008-03-04
Last Updated: 2008-03-05 18:05:36 UTC
by Adrien de Beaupre (Version: 3)
0 comment(s)

An observant reader noticed a fairly dramatic upswing in scanning for UDP/7100. This port is noted as being the X Font service.


More recent graph can be seen here.

Got packets? Got theory? Got sploit? Got malware?

Cheers,
Adrien de Beaupré

Update 1:

http://blogs.zdnet.com/security/?p=556
Solaris worm/bot?

Update 2:

The X Font Service runs on TCP.
P2P?

Keywords:
0 comment(s)

Comments


Diary Archives