[76952] in North American Network Operators' Group
TCP Syns to 445 and 11768
daemon@ATHENA.MIT.EDU (Cheung, Rick)
Fri Jan 7 10:25:37 2005
From: "Cheung, Rick" <Rick.Cheung@nextelpartners.com>
To: nanog@merit.edu
Date: Fri, 7 Jan 2005 09:25:01 -0600
Errors-To: owner-nanog-outgoing@merit.edu
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C4F4CD.0EEBC66F
Content-Type: text/plain;
charset="iso-8859-1"
Hi. Anyone notice an increase of TCP Syns to port 11768, and 445
across random internet IPs? I googled the port, and found a similar posting
here:
http://www.trustedmatrix.org/portal/forum_viewtopic.php?7.954
We located the source on our network, updated DATs, and
WindowsUpdate hotfixes, but the problem persists.
___________________________________________________________________
Thanks,
Rick Cheung
This message, including any attachments, contains confidential information intended for a specific
individual and purpose and is protected by law. If you are not the intended recipient, please contact
sender immediately by reply e-mail and destroy all copies.
You are hereby notified that any disclosure, copying, or distribution of this message, or the taking
of any action based on it, is strictly prohibited.
WARNING: Computer viruses can be transmitted via email. The recipient should check this email
and any attachments for the presence of viruses. The sender accepts no liability for any damage
caused by any virus transmitted by this email. E-mail transmission cannot be guaranteed
to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive
late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors
or omissions in the contents of this message, which arise as a result of e-mail transmission.
------_=_NextPart_001_01C4F4CD.0EEBC66F
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=
=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version=
5.5.2653.12">
<TITLE>TCP Syns to 445 and 11768</TITLE>
</HEAD>
<BODY>
<P> <FONT SIZE=3D2 FACE=
=3D"Verdana">Hi. Anyone notice an increase of TCP Syns to port 11768, and=
445 across random internet IPs? I googled the port, and found a similar=
posting here:</FONT></P>
<P><FONT SIZE=3D2 FACE=3D"Verdana"><A HREF=
=3D"http://www.trustedmatrix.org/portal/forum_viewtopic.php?7.954" TARGET=
=3D"_blank">http://www.trustedmatrix.org/portal/forum_viewtopic.php?7.954</=
A></FONT>
</P>
<P> <FONT SIZE=3D2 FACE=
=3D"Verdana">We located the source on our network, updated DATs, and=
WindowsUpdate hotfixes, but the problem persists.</FONT>
</P>
<BR>
<P><FONT COLOR=3D"#000000" SIZE=3D2 FACE=
=3D"Verdana">______________________________________________________________=
_____</FONT>
</P>
<P><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Verdana">Thanks,</FONT>
<BR><FONT COLOR=3D"#000000" SIZE=3D2 FACE=3D"Verdana">Rick Cheung</FONT>
</P>
</BODY>
</HTML>
<table><tr><td bgcolor=3D#ffffff><font color=3D#000000>This message,=
including any attachments, contains confidential information intended for=
a specific<br>
individual and purpose and is protected by law. If you are not the intended=
recipient, please contact<br>
sender immediately by reply e-mail and destroy all copies. <br>
You are hereby notified that any disclosure, copying, or distribution of=
this message, or the taking <br>
of any action based on it, is strictly prohibited.<br>
<br>
WARNING: Computer viruses can be transmitted via email. The recipient=
should check this email<br>
and any attachments for the presence of viruses. The sender accepts no=
liability for any damage <br>
caused by any virus transmitted by this email. E-mail transmission cannot=
be guaranteed <br>
to be secure or error-free as information could be intercepted, corrupted,=
lost, destroyed, arrive <br>
late or incomplete, or contain viruses. The sender therefore does not=
accept liability for any errors <br>
or omissions in the contents of this message, which arise as a result of=
e-mail transmission.<br>
</font></td></tr></table>
------_=_NextPart_001_01C4F4CD.0EEBC66F--
