SCOUG-HELP Mailing List Archives

<< Previous Message <<

Date:	Sat, 18 May 2002 22:27:58 PST7
From:	"Steven Levine" <steve53@earthlink.net >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: My ISP is hacking me ?

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

In <3CE6E6D7.7950@peterskye.com>, on 05/18/02
at 03:43 PM, Peter Skye said:

>they're probing my network? I doubt it's some private hacker -- there
>are only 256 addresses on 4.35.40.* and the chances of having such a

That's true, but it's possible one of Verizon's routers has been
compromised.

>The probes aren't on server ports, they're higher up -- 137, 139, 548,
>888, 5632. (See \MPTN\ETC\services)

Those ports sound suspiciously like ports used by some IRC worms. You
might try a google search for:

worm port 888

when Google decides to work again. It's not quite right at the moment, so
they might be doing maintenance.

Steven

--
---------------------------------------------------------------------
"Steven Levine" MR2/ICE 2.31a #10183 Warp4/FP15/14.085_W4
www.scoug.com irc.webbnet.org #scoug (Wed 7pm PST)
---------------------------------------------------------------------

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 18 | May | 2002 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.