Re: Possible security problem?
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: Possible security problem?

From: NormanM <spammers.are@immoral.invalid>
Date: Thu Jul 28 2005 - 05:26:41 CEST

On Thu, 28 Jul 2005 01:17:04 +1000, Véronique Souchon wrote:

> I was just about to send when Little Snitch popped up with a new request,
> copied below.
>
>
> The application "nmbd" wants to connect to adsl190.231.axelero.hu on UDP
> port 1027 (exosee)
>
> My network utility says that this address is in Hungary.
>
> I am really, really curious. Is someone trying to use my computer illegally?

My money is on, "Yes". UDP to port 1026; and my router logs are filled with
incoming UDP packets to port 1026. I have always suspected Windows
Messenger Service spam. Can you find a way to examine those packets? Are
there Mac packet sniffers?

-- 
Norman
~Shine, bright morning light,
~now in the air the spring is coming.
~Sweet, blowing wind,
~singing down the hills and valleys.
Received on Thu Sep 29 19:59:40 2005