Re: false portscan alarm

On Wed, 18 Oct 2006 15:58:51 +0100, "Spack" <news@xxxxxxxxxxxxxxxx>
wrote:

Or those packets are simply responses to connections initiated from the
user end and closed prematurely. For instance, the user opened a browser
to www.microsoft.com,.........[snip]
This is just the usual sort of completely harmless and normal activity
that these so called "personal firewalls"..............[snip]

I would disagree with your explanation since I have no firewall, and
don't connect to MS, and yesterday I was receiving UDP packets from
the same range of addresses ( 207.46.18.xx). Today I have received UDP
packets from 204.16.208.74.

You have nothing connecting to MS at all? No windows machine with automatic
updates enabled? No MSN messenger? Windows Messenger? Looks like some recent
UDP packets from that IP have been MSN/Windows messenger spam (which is
possible as normal chat messages are sent via the MS Messenger proxy
servers, which this IP could also be a member of), but without more
information (like packet traces for instance) everything is just
speculation.

Right. See Ibuprofin's explanation.

I use Windows 3.1, it does not even know what is this Messenger
thing. Updates? What's that?

Geo


.

Relevant Pages

  • Re: Critical Errors after a pristine install of OS
    ... this program from my system at next install, i'll find other ways to chat ... I just hope that messenger won't be ... You do not have to update before turning on the Windows XP firewall.. ... Messenger Service, it may indicate that your system is not secure. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Critical Errors after a pristine install of OS
    ... the firewall is on by default. ... about messenger, i'm so spooked right now that i prefer to ... completely delete this program from my system at next install, ... You do not have to update before turning on the Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Pop Up Ads on StartUp
    ... I also tried what you suggested about Windows Messenger but even with all ... It looks like you have the Elite Toolbar malware on your ... > to use HijackThis. ...
    (microsoft.public.windowsxp.general)
  • Re: Critical Errors after a pristine install of OS
    ... Installation of Zonealarm will automatically turn off Windows firewall, ... I just hope that messenger won't be ... reinstalled when i install SP2 or something, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Critical Errors after a pristine install of OS
    ... I have to update first before i can turn on the firewall. ... Messenger Service, it may indicate that your system is not secure. ... administrators to notify Windows users about their networks. ...
    (microsoft.public.windowsxp.security_admin)