I was watching the firewall to see if it was getting to me, but things were slow until suddenly I started getting pounded by hits on 137. I have a good number on 1, which surprised me I almost never got hits on that port. I know 137 is one of the messenger-spam ports, but if all the hits I am getting on that port are popup-spammers, I really feel sorry for whomever has their computers open. I got hit with 6 in one minute one day, and it will drive you krazy. I have seen close to a hundred hits on that port today alone. Well, I am glad you can now rest, at least until the next wave tomorrow... correction, today. Good luck Buck -----Original Message----- From: psyche-list-admin@redhat.com [mailto:psyche-list-admin@redhat.com] On Behalf Of Hans Scheffers Sent: Monday, January 27, 2003 4:04 AM To: psyche-list@redhat.com Subject: Re: port 1 & 137 Port 1434 was some kind of memory resident M$ Sql Server virus You can look it up at the symantec site or any other anti-virus site. It has cost me half my weekend, because of the traffic generated at our provider... our sites were completely blocked. It took them about 11 hours to solve the damn issue :-[ greetz Hans On Mon, 2003-01-27 at 04:44, jdow wrote: > From: "Stephen Carville" <carville@cpl.net> > > > On Sunday 26 January 2003 05:12 pm, Buck wrote: > > > I was wondering what they might be. I think 137 could be the > > microsoft > > > messenger popup ads looking for victims, but I don't know what port > > 1 > > > > http://www.cert.org/incident_notes/IN-98.01.irix.html > > Meanwhile, mixed in with the MS Locator Service and MS SQL probes of late > has been a highly unusual number of ICMP probes just in the last 24 hours. > Does the group mind here have any ideas on the ICMP probes? They seemed to > start about the time the MS SQL port 1434 was apparently blocked by the > DSL provider here. > > {^_^} Joanne, jdow@earthlink.net -- Hans Scheffers http://www.jiffie.nl/stamboom/ If you wish to live wisely, ignore sayings -- including this one. Linux Kernel 2.4.18-19 on a i686 - userid 282784 @ http://counter.li.org -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list -- Psyche-list mailing list Psyche-list@redhat.com https://listman.redhat.com/mailman/listinfo/psyche-list
