Re: Wat is dit eigenlijk

Article View: be.comp.security

Article #305

#305

From: Filbert
Date: Mon, 15 May 2006 17:49

21 lines
1662 bytes

Rudi.$ wrote:

> Goede avond
> 
> mijn router geeft veel van deze meldingen in de logfile, wat kan ik
> daar uit afleiden?
> 
> een vb:
> Source:172.159.21.114,3504 Destination:81.11.205.169,6346 - [DOS] Sun,
> 2006-05-14 21:02:06 - TCP Packet - Source:81.11.190.165,4664
> Destination:81.11.205.169,135 - [DOS] Sun, 2006-05-14 21:02:09 - TCP
> Packet -
> 

Een van de ontelbare win32 wormen veroorzaakt deze internetruis
hoogstwaarschijnlijk: destination port TCP/135 


-- 
"Life becomes much easier once you accept you will fail."
  - http://www.modsecurity.org/blog/archives/2005/03/

Technical Details

Message-ID: <qa3ag.427393$3s6.11688046@phobos.telenet-ops.be>

Path:

arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!t-online.de!80.239.136.19.MISMATCH!tsicnews.teliasonera.com!hoboe2bl2.telenet-ops.be!nntp.telenet.be!kwabbernoot.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail

References: <mn.75417d654f933e89.50274@scarlet.be>

Show Full Headers

Complete Article Headers

X-Google-Thread: 113446,6bcd3dac2e2cb375
X-Google-Attributes: gid113446,public
X-Google-Language: DUTCH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!t-online.de!80.239.136.19.MISMATCH!tsicnews.teliasonera.com!hoboe2bl2.telenet-ops.be!nntp.telenet.be!kwabbernoot.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
From: Filbert <+++ATH0aaadmin+++ATH0@gmail.com>
Subject: Re: Wat is dit eigenlijk
Newsgroups: be.comp.security
Reply-To: +++ATH0aaadmin+++ATH0@gmail.com
References: <mn.75417d654f933e89.50274@scarlet.be>
Lines: 21
Organization: noyb
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7Bit
Message-ID: <qa3ag.427393$3s6.11688046@phobos.telenet-ops.be>
Date: Mon, 15 May 2006 17:49:10 GMT
NNTP-Posting-Host: 84.193.68.33
X-Complaints-To: abuse@telenet.be
X-Trace: phobos.telenet-ops.be 1147715350 84.193.68.33 (Mon, 15 May 2006 19:49:10 MEST)
NNTP-Posting-Date: Mon, 15 May 2006 19:49:10 MEST

Reply to Parent Message