Thread: RPC probe explosion.

  1. #1
    Registered User
    Join Date
    Jan 2002
    Location
    Vancouver
    Posts
    2,212

    RPC probe explosion.

    Hey check out your firewall logs. Loads of port 135 requests all over the place. Is this RPC worm out, or is it just a bunch of script kiddies scanning people?

    If you don't know what RPC is, go to Windows Update, and get the patch. Now.

  2. #2
    Registered User
    Join Date
    Aug 2003
    Posts
    3
    You mean this stuff?

    Code:
    The firewall has blocked Internet access to your computer 
    (TCP Port 135) from *.*.*.* (TCP Port 4152) [TCP Flags: S].
    
    User: default
    Program: Distributed COM Services
    Time: 8/11/2003 4:13:20 PM
    I get quite a few of them since yesterday - and I've been wondering ... Thanks for the news.

  3. #3
    Registered User
    Join Date
    Sep 2002
    Posts
    254
    Is this RPC worm out, or is it just a bunch of script kiddies scanning people?
    both the canned windows scanners are out and i have seen a couple worms floating about...

  4. #4
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    Ive been getting more kiddies than usual.

    I used to have a Linux box as a firewall, so i really never worried that much. But it over heated awhile ago. Maybe i can hack something up. I really dont feel like patching Windows every hour id something is up.

    <edit>
    Once it was in a game(Delta Force Black Hawk Down) and I did the Norton trace thing, it came back as Egypt. Any one else find out anything?

  5. #5
    Registered User
    Join Date
    Jan 2002
    Location
    Vancouver
    Posts
    2,212

  6. #6
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    New for nerds, stuff that matters, my home page

    I didnt even notice that one....

  7. #7
    Crazy Fool Perspective's Avatar
    Join Date
    Jan 2003
    Location
    Canada
    Posts
    2,640
    how do external firewalls/routers fair against these things? My computer doesnt get along with windows patches that well...

  8. #8
    Registered User
    Join Date
    Jan 2002
    Location
    Vancouver
    Posts
    2,212
    Originally posted by Perspective
    how do external firewalls/routers fair against these things? My computer doesnt get along with windows patches that well...
    Well you can block the ports, but if someone joins your network with an infected machine behind the firewall, you're screwed.

  9. #9
    Patent Pending GSLR's Avatar
    Join Date
    Sep 2001
    Posts
    134
    mmm been updating all our machines lately , this is a big prob.
    good to be ahead and up to date though ,
    And To All Those Opposed, WELL !!!
    >Deleted< " Looks like a serial no."

  10. #10
    Pursuing knowledge confuted's Avatar
    Join Date
    Jun 2002
    Posts
    1,916
    I have a webserver running on ports 473 and 474, leaving a hole in my router's firewall. Do I need to disable this temporarily? My ISP blocks incoming communications on ports 23, 80, and all the other ones that are used for standard services (webserver, mail server, etc. It violates the terms of service) I also have the router set to not respond to pings. I think I have all the windows updates, and I'm about to check. Am I safe, or do I need to lock it down more?

    edit: WinXP
    Away.

  11. #11
    Registered User
    Join Date
    Jan 2002
    Location
    Vancouver
    Posts
    2,212
    As long as you're fully patched from windowsupdate you'll be okay.

  12. #12
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    You should lock down everything you can normaly anyway.

    Its kind of annoying(when you run a new program you might have update something), but you dont have to worry as much.

    Im more worried of something getting in rather than something getting out(no vital info on my deskto).


    Just out of curiosity, werent you playing with linux awhile ago?

  13. #13
    Pursuing knowledge confuted's Avatar
    Join Date
    Jun 2002
    Posts
    1,916
    Yup, I have my computer set up to dual boot though. I run Windows well over 90% of the time, and my webserver is on Windows.
    Away.

  14. #14
    Registered User
    Join Date
    Jul 2002
    Posts
    913
    If your like me and only angry at linux for no sound the webserver would be a kool thing to play with on linux.

    But its kind of hard to switch completely for a desktop, I know.

  15. #15
    Pursuing knowledge confuted's Avatar
    Join Date
    Jun 2002
    Posts
    1,916
    I could run the webserver off Linux easily enough, but then I would have to figure out how to keep the Linux and Windows versions of the site the same (I update frequently). Seems like a lot of work... and yeah, the sound thing is my #1 against Linux I don't particularly care for GAIM either. And I can't program in DirectX on Linux/ I don't have Visual Studio on Linux either. The switch is tough. Perhaps when/if I get a laptop, I'll make that dual boot too (if I can... not sure.)
    Away.

Popular pages Recent additions subscribe to a feed

Similar Threads

  1. RPC concurrent server in C...???
    By mr_m4x in forum C Programming
    Replies: 1
    Last Post: 03-28-2009, 11:10 PM
  2. Help in RPC please
    By Duckzilla in forum Networking/Device Communication
    Replies: 1
    Last Post: 11-26-2007, 10:54 PM
  3. IPC vs RPC
    By hermit in forum Tech Board
    Replies: 7
    Last Post: 09-09-2002, 09:58 AM
  4. Rpc
    By Unregistered in forum C Programming
    Replies: 1
    Last Post: 12-01-2001, 01:25 AM
  5. Rpc
    By Unregistered in forum C Programming
    Replies: 0
    Last Post: 11-10-2001, 07:17 PM