Article View: demon.tech.pc
Article #22866Re: was this a probe
From: Brian Greenfield
Date: Mon, 01 May 2000 00:00
Date: Mon, 01 May 2000 00:00
35 lines
2077 bytes
2077 bytes
On Mon, 01 May 2000 18:33:54 +0100, jon <jon@nospam.com> wrote: >On Mon, 01 May 2000 18:22:11 +0100, Brian Greenfield ><not-for-replies@zombie.org.uk> wrote: > >>On Fri, 28 Apr 2000 17:56:03 +0100, Russell Jepson >><russell@no-spam.sb-solutions.co.uk> wrote: >> >>>whilst downloading a large file last week I was alerted by atguard that >>>an inbound UDP packet from 212,159,70,49,pc-anywhere-status which I >>>blocked. >>> >>>was this an attempt to break in, >> >>I've had similar connection attempts when connected to BTi. >>Many of them are malicious, but some just appear to be >>various programs on the lookout for other machines connected >>to the same network. It looks to me as if that is what >>happened here. >> > >What sort of problems can these malicious attacks cause? None (touch wood). They don't get past my firewall. I used to see many, many back orrifice & netbus probes, but I haven't had any of these for a few weeks. Port 2140 (either deep throat or the invasor, according to my list) is the port of the week. -- You're reading this in a newsgroup because that's where I posted it. That's where I'd like to read your reply too. DON'T MAIL AND POST! But, if you really want to reply by email, my reply-to *IS* valid ;)
Technical Details
Message-ID:
<peorgsg8n80k2fbadc5716ud7b127mejm7@4ax.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<ZYUEsBAjKcC5EwOG@soundbyte.force9.co.uk> <323rgson0hdkhef7aqn6588skegea85nri@4ax.com> <nL8NOYbNbeGuDn0ZaP3Q70pYfuqZ@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1036bc,67d58ef1e0fc8465 X-Google-Attributes: gid1036bc,public From: Brian Greenfield <not-for-replies@zombie.org.uk> Subject: Re: was this a probe Date: 2000/05/01 Message-ID: <peorgsg8n80k2fbadc5716ud7b127mejm7@4ax.com> X-Deja-AN: 617972694 Content-Transfer-Encoding: 7bit X-NNTP-Posting-Host: dtseven.demon.co.uk:158.152.243.69 References: <ZYUEsBAjKcC5EwOG@soundbyte.force9.co.uk> <323rgson0hdkhef7aqn6588skegea85nri@4ax.com> <nL8NOYbNbeGuDn0ZaP3Q70pYfuqZ@4ax.com> Content-Type: text/plain; charset=us-ascii X-Complaints-To: abuse@demon.net X-Trace: news.demon.co.uk 957211341 nnrp-06:4058 NO-IDENT dtseven.demon.co.uk:158.152.243.69 MIME-Version: 1.0 Reply-To: $news/19990410$@zombie.org.uk Newsgroups: demon.tech.pc