Security Basics mailing list archives
Re: Kazaa?
From: Rodrigo Ramos <ramos () ipad com br>
Date: 14 Oct 2002 09:11:40 -0200
Hi, How many computers do you have? I saw two IPs in your logs 192.168.0.3 and 192.168.0.2 Regards, Rodrigo Ramos On Fri, 2002-10-11 at 08:52, Christian Simatos wrote:
Hello, My son has installed Kazaa on his pc. My personal antivirus is reporting that kazaa (I suppose because it's port 1214) is scanning my own PC from ports which increase regularly. I googled to try and find information, but I have not found this behavior described. - Can anyone help me? - Is it the normal Kazaa behavior? - Can I prevent it? (other than de-install kazaa) FWIN,2002/10/11,12:33:21 +2:00 GMT,192.168.0.3:1031,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1054,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1055,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:00 +2:00 GMT,192.168.0.3:1056,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1064,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1065,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1066,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:02 +2:00 GMT,192.168.0.3:1067,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:18 +2:00 GMT,192.168.0.3:1071,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:35 +2:00 GMT,192.168.0.3:1078,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,12:35:55 +2:00 GMT,192.168.0.3:1119,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1120,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1121,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:35:56 +2:00 GMT,192.168.0.3:1122,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:36:12 +2:00 GMT,192.168.0.3:1135,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:36:12 +2:00 GMT,192.168.0.3:1136,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:38:39 +2:00 GMT,192.168.0.3:1234,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:41:07 +2:00 GMT,192.168.0.3:1284,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,12:41:37 +2:00 GMT,192.168.0.3:1288,192.168.0.2:1214,TCP (flags:S) FWIN,2002/10/11,12:41:58 +2:00 GMT,192.168.0.3:1290,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,12:42:49 +2:00 GMT,192.168.0.3:1302,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,12:43:40 +2:00 GMT,192.168.0.3:1317,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,12:44:31 +2:00 GMT,192.168.0.3:1318,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,12:48:01 +2:00 GMT,192.168.0.3:1319,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,13:00:26 +2:00 GMT,192.168.0.3:1320,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,13:12:52 +2:00 GMT,192.168.0.3:1330,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,13:25:18 +2:00 GMT,192.168.0.3:1332,192.168.0.2:139,TCP (flags:S) FWIN,2002/10/11,13:37:43 +2:00 GMT,192.168.0.3:1333,192.168.0.2:139,TCP (flags:S) Thanks, Chris
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- RE: Kazaa? Nicko Demeter (Oct 15)
- RE: Kazaa? Mike Dresser (Oct 16)
- <Possible follow-ups>
- Re: Kazaa? fluffy () fluffybacon co uk (Oct 15)
- Re: Kazaa? KoRe MeLtDoWn (Oct 15)
- Re[2]: Kazaa? Christian Simatos (Oct 15)
- RE: Re[2]: Kazaa? Nicko Demeter (Oct 16)
- Re[2]: Kazaa? Christian Simatos (Oct 15)
- Re: Kazaa? Tyler Oar (Oct 15)
- RE: Kazaa? Kevin Jackson (Oct 15)
- Re: Kazaa? Eimantas V (Oct 15)
- Re: Kazaa? Rodrigo Ramos (Oct 15)
- Re: Kazaa? AI Jordanov (Oct 15)
- Re: Kazaa? Neils Christoffersen (Oct 16)
- RE: Re[2]: Kazaa? Chris Santerre (Oct 16)