Re: Possible security problem?

On Wed, 27 Jul 2005 17:59:13 -0400, Tom Stiller wrote:

> I do know that my router is bombarded with connection attempts to ports
> 1026 and 1027 (I think those are associated with Windows networking)
> which I attribute to zombies looking for a host to infect.

I rather suspect "messenger spam". All the packets I see destined for those
ports are UDP packets. Unless the zombie is small enough to be contained in
a single UDP packet. The Windows Messenger Service (not to be confused with
Windows Messenger, the IM) works with UDP packets.

-- 
Norman
~Shine, bright morning light,
~now in the air the spring is coming.
~Sweet, blowing wind,
~singing down the hills and valleys.