full-disclosure - Increased port 135 activity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3F6E8FAC.1020400@jackhammer.org>
From: pdt at jackhammer.org (Paul Tinsley)
Subject: Increased port 135 activity

While you are allowed to have an oppinion I respectfully disagree with 
your point of view.  If all internet traffic was filtered we wouldn't 
have these problems in the first place now would we?  As far as the 
stats go, I don't know how "useless" they are, most if not all of the 
spikes on that graph can be mapped to a worm/virus that was discovered 
around the same time.

"The superior man is satisfied and composed; the mean man is always full 
of distress."
           - Confucius

Anyhow, chill out;  you sure are an angry little man.

security snot wrote:

>If all internet traffic were filtered, idiots like you would have no
>useless statistics to quote, and if you did, no place to quote them.
>
>Not too long ago CERT reported increased scans for tcp 135, 139 and made
>the observation that there was likely to be increased exploitation of
>"anonymous shares" on Windows machines.  How silly they looked when it
>turned out there were multiple exploits for Samba being distributed by
>dvdman, and mass exploitation of this service by every #vuln/#darknet
>hacker.
>
>"oh, something else runs on that port too!"
>	- The Cert Pedophile (friend of KF)
>
>Anyhow, have a nice day.
>
>-----------------------------------------------------------
>"Whitehat by day, booger at night - I'm the security snot."
>- CISSP / CCNA / A+ Certified - www.unixclan.net/~booger/ -
>-----------------------------------------------------------
>
>On Sun, 21 Sep 2003, Paul Tinsley wrote:
>
>  
>
>>Does this bother anybody else?
>>
>>http://isc.incidents.org/port_details.html?port=135
>>
>>Todays numbers are higher than what was seen with blaster (the green
>>peak on the 11th):
>>http://isc.incidents.org/port_details.html?port=135&repax=1&tarax=2&srcax=2&percent=N&days=70&Redraw=
>>
>>Maybe I am just being paranoid but this doesn't give me a good feeling...
>>
>>_______________________________________________
>>Full-Disclosure - We believe in it.
>>Charter: http://lists.netsys.com/full-disclosure-charter.html
>>
>>    
>>