"Jped" <jped@privat.dk> wrote in message news:9kphj6$c0$1@sunsite.dk...
>
> Hej
>
> Lige i øjeblikket bliver jeg nærmest bombardemeret med forsøg på, at koble
> på min computer.
> Kan det være Code Red, der er skyld i dette?
Jeg er ikke klar over hvad det er, men der er også mange forsøg på at
kommunikere med min server, både ftp og www.
Det kommer alt sammen fra et bestemt IP# i 62.242.64.xxx-gruppen. Sikkert
TD@ ADSL, som Jørgen har problemer med.
Nogen der ved hvad der sker?
BTW, jeg kan se i min ZoneAlarm-log at der i juni, og igen i starten af
denne måned blev forsøgt at forbinde til port 137. Hvilke problemer kan det
tyde på?
Efter lidt søgen fandt jeg denne artikel:
http://www.sans.org/newlook/resources/IDFAQ/port_137.htm
Efter lidt sammenligning, kunne det jo godt tyde på at det er det der sker.
Nogen kloge ord?
Takker
Keller
Et udsnit af logfilerne:
FWIN,2001/06/25,09:04:18 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,10:04:18 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,11:04:20 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,12:09:04 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,12:44:06 +2:00
GMT,211.171.18.115:137,192.168.187.164:137,UDP
FWIN,2001/06/25,13:14:02 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,14:07:06 +2:00
GMT,192.168.187.34:1188,192.168.187.164:137,UDP
FWIN,2001/06/25,14:14:02 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,15:14:04 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,16:19:06 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,17:19:06 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,18:13:00 +2:00
GMT,192.168.187.34:1188,192.168.187.164:137,UDP
FWIN,2001/06/25,18:24:04 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,19:24:06 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,20:24:08 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,20:45:30 +2:00
GMT,192.168.187.34:1188,192.168.187.164:137,UDP
FWIN,2001/06/25,21:14:56 +2:00
GMT,192.168.187.82:49598,192.168.187.164:139,TCP
FWIN,2001/06/25,21:24:08 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,21:51:22 +2:00
GMT,192.168.187.82:50290,192.168.187.164:139,TCP
FWIN,2001/06/25,22:24:08 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/25,23:29:10 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/26,00:34:10 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/26,01:34:10 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/26,02:15:52 +2:00
GMT,192.168.187.34:1188,192.168.187.164:137,UDP
FWIN,2001/06/26,02:39:12 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/26,03:39:12 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/26,07:54:16 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/26,08:59:12 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP
FWIN,2001/06/26,09:59:14 +2:00 GMT,62.242.64.131:137,192.168.187.164:137,UDP