Re: Lots of incoming traffic on UDP 1026 and UDP 1027?

From: T. Shannon Gilvary (tsgilvary_at_enconmech.com)
Date: 12/28/04

  • Next message: Mike Sweeney: "Re: Boilerplate Contracts" 
    Date: Tue, 28 Dec 2004 12:56:35 -0500
To: security-basics@securityfocus.com

    FocusHacks wrote:
    > I searched the archives at SecurityFocus and couldn't come up with
    > anything useful other than someone with Zone Alarm obviously saw the
    > same activity and people were trying to tell him to look for listening
    > ports on his machine, which is not the case.
    >
    > I'm getting literally hammered by tons of various IP's on UDP 1026 and UDP 1027

    UDP traffic to these ports is usually Windows Messenger Pop-up spam. 

    -- 
T. Shannon Gilvary
Encon Mechanical, Corp.
(732)922-1305
Fax: (732)922-0745
tsgilvary@enconmech.com
  • Next message: Mike Sweeney: "Re: Boilerplate Contracts"

    Relevant Pages

    • Re: Unusual ports found in nmap scan
      ... Unusual ports found in nmap scan ... > This list is provided by the SecurityFocus Security Intelligence Alert ... For more information on SecurityFocus' SIA service which ...
      (Pen-Test)
    • Re: Begginers basic questions, can someone help?
      ... > access my computer but Zone alarm blocked access. ... There's no easy way that I know of to identify which programs are safe to give ... Internet access to and which are not. ... anything trying to use those ports. ...
      (comp.security.firewalls)
    • Re: FW: baby pen-test question
      ... It's better to begin with those ports (TCP, ... Or if you are lucky enough to find an ONC RPC rexd or pcnfsd server running, ... Do a real *vulnerability* scan if at all possible, not one that says 'you may have ... This list is provided by the SecurityFocus Security Intelligence Alert Service. ...
      (Pen-Test)
    • Re: Indexing a largish collection of mail and usenet messages?
      ... The lists are all active so archives typically add a few messages each day. ... I don't know lqtext, but Lucene seems to work in a similar way: a first program builds & updates an index, a second program allows to query the index. ... There are numerous ports to other languages are in the ports tree). ... Also, the messages in the archive never change and I know what files are new each day, so it would be pointless for a package to re-spider the whole archive to look for the new messages. ...
      (freebsd-questions)
    • Re: How do I Restrict port access to single IP Address
      ... I don't use Zone Alarm, so I'm unable to give you a direct ... >>> I want to open, but restrict access to, ports TCP 139 and TCP ... >>> machine running XP SP2 with windows firewall enabled. ...
      (microsoft.public.windowsxp.security_admin)