-
Aug 12, 2003, 03:29 PM
#21
Re:major warning!!! web attack in progress
-
Aug 12, 2003, 11:33 PM
#22
Re:major warning!!! web attack in progress
I think we need a section for posting warnings and stuff like that. Like a security section. Deffinately.
-
Aug 13, 2003, 12:17 AM
#23
Re:major warning!!! web attack in progress
I think everyone who was on the internet today (with xp) has been infected!
The text is a copy of my firewall log.
-
Aug 13, 2003, 12:22 AM
#24
Re:major warning!!! web attack in progress
12/08/2003 11:55:29 PM Port scanned 208.131.161.90   ; TCP(135)
12/08/2003 11:55:29 PM Connection request 208.131.161.90   ; TCP(135)
12/08/2003 11:46:03 PM Port scanned 61.85.124.162 TCP(135)
12/08/2003 11:46:03 PM Connection request 61.85.124.162 TCP(135)
12/08/2003 11:45:55 PM Port scanned 208.131.161.77   ; TCP(135)
12/08/2003 11:45:55 PM Connection request 208.131.161.77   ; TCP(135)
12/08/2003 11:37:43 PM Port scanned 208.131.161.71   ; TCP(135)
12/08/2003 11:37:43 PM Connection request 208.131.161.71   ; TCP(135)
12/08/2003 11:23:37 PM Port scanned 208.131.161.53   ; TCP(135)
12/08/2003 11:23:37 PM Connection request 208.131.161.53   ; TCP(135)
12/08/2003 11:01:42 PM Port scanned 63.164.166.101   ; TCP(135)
12/08/2003 11:01:42 PM Connection request 63.164.166.101   ; TCP(135)
12/08/2003 10:57:21 PM Port scanned 208.131.161.30   ; TCP(135)
12/08/2003 10:57:21 PM Connection request 208.131.161.30   ; TCP(135)
12/08/2003 10:38:33 PM Port scanned 208.131.161.13   ; TCP(135)
12/08/2003 10:38:33 PM Connection request 208.131.161.13   ; TCP(135)
[hr]
All of those are Anngel users!!
-
Aug 13, 2003, 06:59 AM
#25
Re:major warning!!! web attack in progress
[quote author=newtoo? link=board=1;threadid=1531;start=15#msg14713 date=1060751825]
I think everyone who was on the internet today (with xp) has been infected![/quote]I'm not infected! And I'm on XP.
My firewall log is pretty smiliar. A LOT of activity requests on port 135 from other N5 ip addresses. I am getting requests every few minutes 'round the clock on that port. Good 'ole Zonealarm.
-
Aug 13, 2003, 11:44 PM
#26
Re:major warning!!! web attack in progress
[quote author=YaGGa~2 link=board=1;threadid=1531;start=0#msg14555 date=1060696608]
s**t..
Last nite my machine asked me to shutdown like there was no tommorow... giving me some message 'bout "rpc had a critical error and windows needed to restart"
any a you think this is related...
i just run an abort (shutdown -a) and ignore it :-\
[/quote]
Yes it is,pc's running w2k that were infected by the virus at my work place were experiencing that exact prob. Had to install 2 service pack updates in ordwer to install the patch on w2k
When I got home monday my little brother told me that once he connected to the net the pc said it was shuttin down.All I did was install firewall..
I'm running norton's perosnal firewall and it's being holding up quiet well. I haven't install any patches just installed firewall configure to my satisfaction and then connected to the net, updated nav and scanned my machine now I kool as ever.
-
Aug 14, 2003, 12:18 AM
#27
Re:major warning!!! web attack in progress
[quote author=newtoo? link=board=1;threadid=1531;start=15#msg14714 date=1060752164]
12/08/2003 11:55:29 PM Port scanned 208.131.161.90 TCP(135)
12/08/2003 11:55:29 PM Connection request 208.131.161.90 TCP(135)
12/08/2003 11:46:03 PM Port scanned 61.85.124.162 TCP(135)
12/08/2003 11:46:03 PM Connection request 61.85.124.162 TCP(135)
12/08/2003 11:45:55 PM Port scanned 208.131.161.77 TCP(135)
12/08/2003 11:45:55 PM Connection request 208.131.161.77 TCP(135)
12/08/2003 11:37:43 PM Port scanned 208.131.161.71 TCP(135)
12/08/2003 11:37:43 PM Connection request 208.131.161.71 TCP(135)
12/08/2003 11:23:37 PM Port scanned 208.131.161.53 TCP(135)
12/08/2003 11:23:37 PM Connection request 208.131.161.53 TCP(135)
12/08/2003 11:01:42 PM Port scanned 63.164.166.101 TCP(135)
12/08/2003 11:01:42 PM Connection request 63.164.166.101 TCP(135)
12/08/2003 10:57:21 PM Port scanned 208.131.161.30 TCP(135)
12/08/2003 10:57:21 PM Connection request 208.131.161.30 TCP(135)
12/08/2003 10:38:33 PM Port scanned 208.131.161.13 TCP(135)
12/08/2003 10:38:33 PM Connection request 208.131.161.13 TCP(135)
[hr]
All of those are Anngel users!!
[/quote]
xenocrates was telling me summen about this, i think isp's like c&w and n5 renew ur ip address.
when i am online i keep getting a message from zone alarm pro saying that someone with a c&w email address was blocked, when i checked the details, it turned out to be a guy who seems to work for c&w, i got info like his email address, C&w info like location, and department.
this couldnt be someone with bad intentions,a hacker per say, because he would be darn stupid. i traced the location with zone alarm and it was coming from Kingston.
this leaves me to think that the renewing of the ip address is what causes things like this to happen.
Correct me if i am wrong
-
Aug 16, 2003, 09:15 AM
#28
Re:major warning!!! web attack in progress
very good point mitchie.....yes when they reconnect, they get a new addy, which is why i said you should log the ip and the 'time' and send of to the isp contact email. they will then tell the user to fix their comp.
-
Aug 19, 2003, 01:50 PM
#29
Re:major warning!!! web attack in progress
thank god for my vpn and checkpoint, the worm did pose any probs here.
-
Aug 19, 2003, 02:07 PM
#30
Re:major warning!!! web attack in progress
[quote author=sweetheartgool link=board=1;threadid=1531;start=15#msg15381 date=1061319016]
thank god for my vpn and checkpoint, the worm did pose any probs here.
[/quote]
U fortunate...
maybe because youre a guurlllllll :
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules