Blaster en tcp-poort 6346

Article View: be.comp.security

Article #1383

#1383

From: anonymous
Date: Thu, 14 Aug 2003 18:58

13 lines
1526 bytes

Dag

Is tcp-poort 6346 ook een van de poorten waarop het Blaster-virus scant?  De
laatste 6 uren heb ik op verschillende ip's ongeveer 410 scans ondergaan (en
gelukkig ook geblokkeerd) op die specifieke poort, zijnde meer dan 1 per
minuut.
Is tcp-poort 6346 niet zo'n typische Gnutella-poort?  Nochtans heb ik
vandaag nog geen enkele Gnutella-client gedraaid.

Alvast bedankt

-- 
Polar

Technical Details

Message-ID: <bhgm3v$hk7q$1@ID-200125.news.uni-berlin.de>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-06!sn-xit-09!supernews.com!newsfeed.news2me.com!snoopy.risq.qc.ca!in.100proofnews.com!in.100proofnews.com!fu-berlin.de!uni-berlin.de!213.219.139.151!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: DUTCH,ASCII-7-bit
X-Google-Thread: 113446,d07c48195e1b4d7c,start
X-Google-Attributes: gid113446,public
X-Google-Thread: 106e3d,d07c48195e1b4d7c,start
X-Google-Attributes: gid106e3d,public
X-Google-Thread: 109eb5,d07c48195e1b4d7c,start
X-Google-Attributes: gid109eb5,public
X-Google-ArrivalTime: 2003-08-14 11:58:14 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-xit-04!sn-xit-06!sn-xit-09!supernews.com!newsfeed.news2me.com!snoopy.risq.qc.ca!in.100proofnews.com!in.100proofnews.com!fu-berlin.de!uni-berlin.de!213.219.139.151!not-for-mail
From: "anonymous" <polar_usenetCOULD_DO_WITHOUT_SPAM@wanadoo.be>
Newsgroups: be.comp.security,nl.comp.virus,nl.internet.misbruik
Subject: Blaster en tcp-poort 6346
Date: Thu, 14 Aug 2003 20:58:04 +0200
Lines: 15
Message-ID: <bhgm3v$hk7q$1@ID-200125.news.uni-berlin.de>
NNTP-Posting-Host: 213.219.139.151
X-Trace: news.uni-berlin.de 1060887487 577786 213.219.139.151 (16 [200125])
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165