tomorrow... correction, today.
Good luck
Buck
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Hans Scheffers
Sent: Monday, January 27, 2003 4:04 AM
To: [EMAIL PROTECTED]
Subject: Re: port 1 & 137
Port 1434 was some kind of memory resident M$ Sql Se
Port 1434 was some kind of memory resident M$ Sql Server virus
You can look it up at the symantec site or any other anti-virus site.
It has cost me half my weekend, because of the traffic generated at our
provider... our sites were completely blocked. It took them about 11
hours to solve the damn
From: "Tom Diehl" <[EMAIL PROTECTED]>
> On Sun, 26 Jan 2003, jdow wrote:
>
> > From: "Buck" <[EMAIL PROTECTED]>
> >
> > > What ports are the popular ones for this attack we are under?
> >
> > 1434 and 137. What bothers me is the number of ICMP probes coming
through
> > of late. That's unusual; and,
On Sun, 26 Jan 2003, jdow wrote:
> From: "Buck" <[EMAIL PROTECTED]>
>
> > What ports are the popular ones for this attack we are under?
>
> 1434 and 137. What bothers me is the number of ICMP probes coming through
> of late. That's unusual; and, I don't know what it is yet. They seem to be
> ori
From: "Buck" <[EMAIL PROTECTED]>
> What ports are the popular ones for this attack we are under?
1434 and 137. What bothers me is the number of ICMP probes coming through
of late. That's unusual; and, I don't know what it is yet. They seem to be
originating almost anywhere.
{^_^}
--
Psyche-l
From: "Stephen Carville" <[EMAIL PROTECTED]>
> On Sunday 26 January 2003 05:12 pm, Buck wrote:
> > I was wondering what they might be. I think 137 could be the
> microsoft
> > messenger popup ads looking for victims, but I don't know what port
> 1
>
> http://www.cert.org/incident_notes/IN-98.0
What ports are the popular ones for this attack we are under?
Buck
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Norman E. Brake, Jr.
Sent: Sunday, January 26, 2003 9:31 PM
To: [EMAIL PROTECTED]
Subject: RE: port 1 & 137
I think 137 is the Micro
but I don't know what port 1
> does.
>
> Buck
>
>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> On Behalf Of Dave Sherman
> Sent: Sunday, January 26, 2003 8:02 PM
> To: RedHat 8.0
> Subject: Re: port 1 & 137
>
Thanks
Buck
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
On Behalf Of Stephen Carville
Sent: Sunday, January 26, 2003 8:54 PM
To: [EMAIL PROTECTED]
Subject: Re: port 1 & 137
On Sunday 26 January 2003 05:12 pm, Buck wrote:
> I was wondering what they might
On Sunday 26 January 2003 05:12 pm, Buck wrote:
> I was wondering what they might be. I think 137 could be the
microsoft
> messenger popup ads looking for victims, but I don't know what port
1
http://www.cert.org/incident_notes/IN-98.01.irix.html
--
Stephen Carville http://www.heronforge.net/
02 PM
To: RedHat 8.0
Subject: Re: port 1 & 137
On Sun, 2003-01-26 at 18:32, Buck wrote:
> My firewall is being hit by a number of different IP addresses (with
one
> exception).
>
> Those looking for port 1 are from source port 761 and those destined
for
> port 137 are from
On Sun, 2003-01-26 at 18:32, Buck wrote:
> My firewall is being hit by a number of different IP addresses (with one
> exception).
>
> Those looking for port 1 are from source port 761 and those destined for
> port 137 are from source ports 1036 -1039
>
> The one exception to the list of ips is 21
12 matches
Mail list logo
