Security Incidents mailing list archives

More Probes from Korea


From: Alan J Wright <AlanJWright () MANX NET>
Date: Sun, 18 Mar 2001 19:11:52 +0000


I received the following alert from Zone Alarm tonight.

The firewall has blocked Internet access to your computer (TCP Port 111)
from 211.42.159.30 (TCP Port 1964) [TCP Flags: S].@ 1823hrs (GMT)  and then

The firewall has blocked Internet access to your computer (NetBIOS Name)
from 195.252.124.71 (NetBIOS Name).@ 1838hrs (GMT)

The first is from Korea and the kr.nic appears to be working again.
The second is from Yugoslavia.

Question: If you do not have NEtbios installed and running as a network
protocol, only TCP for the Internet, does Microsoft have a hidden netbios
server on my machine. ( Running windoze ME, ) or is this just another probe ?


All the Best

Alan

(+447624462772 mobile)
AlanJWright () manx net


PRIVILEGED - PRIVATE AND CONFIDENTIAL
This electronic mail is solely for the use of the addressee and may
contain information which is confidential or privileged.
If you receive this electronic mail in error, please delete it from
your system immediately and notify the sender by electronic mail or
using any of the above contact details.

To request PGP public key,

 http://pgpkeys.mit.edu:11371/

Attachment: _bin
Description:


Current thread: