Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Messenger Spam on 1026 - Bad News Kids
Search Topic:
 Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Links: ·Hijack This logs? ·Panda Free Tools ·Vundo Removal
Should still use a software firewall with a router »
« Netstat Prompt Results - What does this mean?  
AuthorAll Replies


whispa2113

join:2002-11-20
Marysville, CA

reply to psloss
Re: Messenger Spam on 1026 - Bad News Kids

Click for full size
I did a Symantec Security check of that IP and found out the IP is San Jose California.

I'll see if I can get a screen shot.
to forum · permalink · · 2003-09-16 15:12:18 · Reply to this

psloss
Premium
join:2002-02-24
Alpharetta, GA

reply to Link Logger
said by Link Logger See Profile:
Today my interest in the recent flood of UDP port 1026 drove me to write PortPuker, which allows me to take captures from PortPeeker and bring them into the lab where I can conduct some experiments on the traffic in question.
This has been discussed a lot recently and someone pointed out a LURHQ advisory from the June timeframe:
»www.lurhq.com/popup_spam.html

Also, spammers are also beginning to send messages to UDP port 1027. I have also seen stray packets to UDP port 1028.

Lawrence Baldwin and I recently modified the myNetWatchman WinPopup tester to send messages to both the endpoint mapper UDP port, 135, and also to UDP ports 1025-1029, inclusive:
»Update: Windows Messenger Spam

Hopefully, this is a more realistic test of what is happening now.

Philip Sloss
--
(Thanks, anonymous!) Feedback? e-mail: stuff@lupwa.org
to forum · permalink · · 2003-09-16 10:25:55 · Reply to this
Forums » Up and Running » Security » SecurityShould still use a software firewall with a router »
« Netstat Prompt Results - What does this mean?  

Thursday, 10-Dec 07:16:07 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [200] Sprint Sued For Distracted Driving Death
· [117] AT&T Launching New 24 Mbps U-Verse Tier
· [82] 3G Network Test Says AT&T Is Tops
· [72] Mediacom Unveils 105 Mbps Pricing
· [67] AT&T Hints At Usage-Based iPhone Data Pricing
· [66] Sprint Poised For A Turnaround?
· [66] WPA Cracker: Test WPA-PSK Networks In 20 Minutes
· [51] The Future Of Wi-Fi Is Bright
· [47] Site Leaks Yahoo, Verizon Fed Data Share Pricing
· [45] Microwaving Your Innards Is Not 'Extreme'
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· IMG 1.7 (IMG Updates and Discussion) [Verizon FIOS TV]
· Cross Server Dungeon Experience [World of Warcraft]
· Comcast refused to install 400' feet. [Comcast HSI]
· Extjs grid combo box. [Webmasters and Developers]
· Adobe Flash Player 10 Fix for WinXP, IE8, Firefox, ect. [Microsoft Help]
· Connecting to Google Voice Via SIP [VOIP Tech Chat]
· Opening a file download dialog from a JavaScript function. [Webmasters and Developers]
· SB6120 Firmware update [Comcast HSI]
· [WIN7] Outlook express under Windows 7? [Microsoft Help]