Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

DCOM expoit

  
   Security Forums (Home) -> General Discussions RSS
Next:  how do I remove this?  
Author Message
Mike H

External


Since: Oct 13, 2005
Posts: 2



(Msg. 1) Posted: Thu Oct 13, 2005 12:00 pm
Post subject: DCOM expoit
Archived from groups: alt>comp>anti-virus (more info?)
Avast is blocking this every five to ten minutes. It's from
67.5.138.1:135 tcp. There is very little info on this and what there is
seems pretty old. Is there a serious problem here and is there any way
to see if this is directed at this computer?
thanks!

 >> Stay informed about: DCOM expoit 
Back to top
Login to vote
Beauregard T. Shagnasty

External


Since: Aug 01, 2004
Posts: 496



(Msg. 2) Posted: Thu Oct 13, 2005 7:24 pm
Post subject: Re: DCOM expoit [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Mike H wrote:

> Avast is blocking this every five to ten minutes. It's from
> 67.5.138.1:135 tcp.

Avast is an anti-virus program (which I have). Are you sure you don't
mean a firewall? Which one?

Are you by chance on a Qwest connection in Washington state? That IP
belongs to Qwest and is probably pinging neighboring IPs looking for new
victims. I'm on RoadRunner cable, and I get about 600 hits per hour from
neighbors in my same netblock.

Rest easy; your firewall is doing its job.

--
-bts
-When motorcycling, never follow a pig truck

 >> Stay informed about: DCOM expoit 
Back to top
Login to vote
Mike H

External


Since: Oct 13, 2005
Posts: 2



(Msg. 3) Posted: Thu Oct 13, 2005 7:24 pm
Post subject: Re: DCOM expoit [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Beauregard T. Shagnasty wrote:

> Mike H wrote:
>
>
>>Avast is blocking this every five to ten minutes. It's from
>>67.5.138.1:135 tcp.
>
>
> Avast is an anti-virus program (which I have). Are you sure you don't
> mean a firewall? Which one?
>
> Are you by chance on a Qwest connection in Washington state? That IP
> belongs to Qwest and is probably pinging neighboring IPs looking for new
> victims. I'm on RoadRunner cable, and I get about 600 hits per hour from
> neighbors in my same netblock.
>
> Rest easy; your firewall is doing its job.
>

Hmm. I also run Kerio firewall and the pop up doesn't bother to state
who's the author. I also experienced a tremendous slow down on my old
telephone line at roughly the same time these things started appearing.
I AM in western washington with (uggh) Qwest. Good guess. No
alternatives and no DSL out here in the sticks, unfortunately.
 >> Stay informed about: DCOM expoit 
Back to top
Login to vote
Beauregard T. Shagnasty

External


Since: Aug 01, 2004
Posts: 496



(Msg. 4) Posted: Fri Oct 14, 2005 2:24 am
Post subject: Re: DCOM expoit [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Mike H wrote:

> Beauregard T. Shagnasty wrote:
>
>> Mike H wrote:
>>
>>>Avast is blocking this every five to ten minutes. It's from
>>>67.5.138.1:135 tcp.
>>
>> Avast is an anti-virus program (which I have). Are you sure you don't
>> mean a firewall? Which one?
>>
>> Are you by chance on a Qwest connection in Washington state? That IP
>> belongs to Qwest and is probably pinging neighboring IPs looking for new
>> victims. I'm on RoadRunner cable, and I get about 600 hits per hour from
>> neighbors in my same netblock.
>>
>> Rest easy; your firewall is doing its job.
>
> Hmm. I also run Kerio firewall and the pop up doesn't bother to state
> who's the author. I also experienced a tremendous slow down on my old
> telephone line at roughly the same time these things started appearing.

You could put together a log and send it to your ISP's abuse desk.

> I AM in western washington with (uggh) Qwest. Good guess. No
> alternatives and no DSL out here in the sticks, unfortunately.

Not a guess. <g>

--
-bts
-When motorcycling, never follow a pig truck
 >> Stay informed about: DCOM expoit 
Back to top
Login to vote
Display posts from previous:   
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]