SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Sun, 19 May 2002 08:36:52 PST7
From:	"Steven Levine" <steve53@earthlink.net >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: My ISP is hacking me ?

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

In <3CE777B0.59AD@peterskye.com>, on 05/19/02
at 02:03 AM, Peter Skye said:

>Amazing stuff! 548 is AppleTalk File Sharing Protocol - some Mac script
>kiddie is after my machine. 5632 is PCAnywhere - a Windows freaker is
>trying to remotely run my desktop. Haven't found 888 yet.

It will be interesting what the security guys tell you. It's their job to
know the details of which worms use what ports.

FWIW, 888 is:

erlogin 888/tcp # Login and environment passing

so it makes sense that a worm might try to use it.

>relentlessly banging on my port 80 since 8:36 last night. And he's on
>Verizon, same as me. What good is port 80? What's he going to do, try

That one's easy. He must want your box to host his home page. :-)

>to run "cgi-bin?fdisk" just for fun?

Not right away, but maybe someday. You could find out, but you'd have to
open up port 80 enough to capture some GET and POST requests.

Steven

--
---------------------------------------------------------------------
"Steven Levine" MR2/ICE 2.31a #10183 Warp4/FP15/14.085_W4
www.scoug.com irc.webbnet.org #scoug (Wed 7pm PST)
---------------------------------------------------------------------

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 19 | May | 2002 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.