From: "Tom Diehl" <tdiehl@rogueind.com> > On Sun, 26 Jan 2003, jdow wrote: > > > From: "Buck" <buck-rh@towncorp.net> > > > > > What ports are the popular ones for this attack we are under? > > > > 1434 and 137. What bothers me is the number of ICMP probes coming through > > of late. That's unusual; and, I don't know what it is yet. They seem to be > > originating almost anywhere. > > FWIW I am seeing them here also. I too am courious but do not have a clue as to > what is going on. Also I seem to be seeing more ICMP probes than drops for > 1433 and 1434. I do not think that means much of anything but.... Many providers are blocking the 1434 and 1433 ports. {^_^} -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list