Hi,
I installed a new WLAN router/access point and after configuring the beast I looked at the logs in the router after a couple of hours.
I found more than 100 entries (during 3 hours) like:
Time Message Source Destination Note ------------------------------------------------------------------------ 01:01:45 Dropped TCP 211.74.178.73:1342 x.x.x.x:445 Rule: packetfrom WAN default deny
The sources are mostly the same (6 or 7 different), all trying my IP (x.x.x.x) and several different ports:
445, 135, 1839, 2536, etc.
Is this normal attack attempts or results of the infamous worm? BTW: I'm not using any donkeys or such kiddie stuff.
Well, the worm is known to scan on ports 135 and 445. Can't say about the others...
-- Dave Sherman - MCSE, MCSA, CCNA
Meddle not in the affairs of dragons, for you are crunchy, and good with ketchup.
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
