Re: Wat is dit eigenlijk

Article View: be.comp.security

Article #307

#307

From: Rudi.$
Date: Mon, 15 May 2006 17:53

27 lines
2389 bytes

Na rijp beraad schreef Filbert :
> Rudi.$ wrote:
>
>> Goede avond
>> 
>> mijn router geeft veel van deze meldingen in de logfile, wat kan ik
>> daar uit afleiden?
>> 
>> een vb:
>> Source:172.159.21.114,3504 Destination:81.11.205.169,6346 - [DOS] Sun,
>> 2006-05-14 21:02:06 - TCP Packet - Source:81.11.190.165,4664
>> Destination:81.11.205.169,135 - [DOS] Sun, 2006-05-14 21:02:09 - TCP
>> Packet -
>> 
>
> Een van de ontelbare win32 wormen veroorzaakt deze internetruis
> hoogstwaarschijnlijk: destination port TCP/135 

Hij is nu stilaan aan het afnemen, verder op de pc niks te vinden van 
een virus of andere beestjes.

-- 
Groetjes
-- Mail is valid :  2 day's only. Of andromedaorama@gmail.com
http://blog.seniorennet.be/sir_andro/

np: (Winamp is niet aktief ;-)

Technical Details

Message-ID: <mn.7ca97d655310d011.50274@scarlet.be>

Path:

arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.scarlet.biz!news.scarlet.biz.POSTED!not-for-mail

References: <mn.75417d654f933e89.50274@scarlet.be> <qa3ag.427393$3s6.11688046@phobos.telenet-ops.be>

Show Full Headers

Complete Article Headers

X-Google-Thread: 113446,6bcd3dac2e2cb375
X-Google-Attributes: gid113446,public
X-Google-Language: DUTCH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!local01.nntp.dca.giganews.com!nntp.scarlet.biz!news.scarlet.biz.POSTED!not-for-mail
NNTP-Posting-Date: Mon, 15 May 2006 12:52:50 -0500
Subject: Re: Wat is dit eigenlijk
From: Rudi.$ <andromeda@scarlet.be>
References: <mn.75417d654f933e89.50274@scarlet.be> <qa3ag.427393$3s6.11688046@phobos.telenet-ops.be>
Newsgroups: be.comp.security
Message-ID: <mn.7ca97d655310d011.50274@scarlet.be>
Organization: home
X-Newsreader: MesNews/1.05.00.00-nl
Date: Mon, 15 May 2006 19:53:53 +0200
MIME-Version: 1.0
X-Face: "#'<+JnKjna7aEqRFlR4^G6^sm{eSDomxAZxKDUrNM@S7n(hji5vAuA\fohsH_eG$6AQz80 `huhG_EJX^r${k#mr6=0z$B#,gWiOw;;(JoDm$Y<P]'g3oRofkPyQ]+c>9CN9XBuC|N+"u=,{UeB1' <`UNIS/x%8D{n(FP_vNf1=>h>qlP{qAX~\Q,xDOtvO3(BBB#G_i{yJf-2A8QJm
Reply-To: 2706w7e29yf22ak@jetable.net
X-Reply-Valide: 16/05/2006 9:52:51
Content-Type: text/plain; charset="iso-8859-15"; format=flowed
Content-Transfer-Encoding: 8bit
Lines: 29
NNTP-Posting-Host: 81.11.205.169
X-Trace: sv3-p5QwLAL5Zn5DWOTtRCMv+nZZtmlwzyN6bq5rmk1kIh8thSdBfHuYwhaZ0GXbA9sSmn11dYkNVpJIWgn!8uHnJSPPLOIcs7XXaoBjXjJe//Ld4rqRx2qr5ID+gshr2tp37XhampK5nL9WdzfMw2fnDsVE2J7G!5Q==
X-Complaints-To: abuse@scarlet.be
X-DMCA-Complaints-To: abuse@scarlet.biz
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly
X-Postfilter: 1.3.32

Reply to Parent Message