packets

TdC

Trem's hunky sex love muffin
Joined
Dec 20, 2003
Messages
30,925
I've been getting a HUGE amount of packets blocked at my firewall to port 13618 from a large amount of hosts. Anyone had similar experiences lately? Is there some new beastie about?
 

Jupitus

Old and short, no wonder I'm grumpy!
Staff member
Moderator
FH Subscriber
Joined
Dec 14, 2003
Messages
3,483
I thought it was a thread about Wij :(
 

Tom

I am a FH squatter
Joined
Dec 22, 2003
Messages
17,687
Theres only one type of packet around, and thats a packet of crisps :eek:
 

TdC

Trem's hunky sex love muffin
Joined
Dec 20, 2003
Messages
30,925
bah humbug :p
 

TdC

Trem's hunky sex love muffin
Joined
Dec 20, 2003
Messages
30,925
seriously I'm getting logs like this every couple of minutes :/

TdC's firewall said:
[2006-09-05 08:34:30] | From:[84.181.107.34] | Port:[13618] | [Blocked]
[2006-09-05 08:34:35] | From:[218.212.253.147] | Port:[13618] | [Blocked]
[2006-09-05 08:34:37] | From:[84.24.170.152] | Port:[13618] | [Blocked]
[2006-09-05 08:34:40] | From:[65.186.70.20] | Port:[13618] | [Blocked]
[2006-09-05 08:34:40] | From:[62.1.219.116] | Port:[13618] | [Blocked]
[2006-09-05 08:34:43] | From:[69.246.41.78] | Port:[13618] | [Blocked]
[2006-09-05 08:34:43] | From:[194.143.177.36] | Port:[13618] | [Blocked]
[2006-09-05 08:34:44] | From:[74.64.59.195] | Port:[13618] | [Blocked]
[2006-09-05 08:34:48] | From:[86.5.84.191] | Port:[13618] | [Blocked]
[2006-09-05 08:34:50] | From:[221.208.208.87] | Port:[1026] | [Blocked]
[2006-09-05 08:34:50] | From:[221.208.208.87] | Port:[1027] | [Blocked]
[2006-09-05 08:34:52] | From:[84.27.219.2] | Port:[13618] | [Blocked]
[2006-09-05 08:34:53] | From:[87.97.88.111] | Port:[13618] | [Blocked]
[2006-09-05 08:34:54] | From:[81.197.55.81] | Port:[13618] | [Blocked]
[2006-09-05 08:34:56] | From:[68.217.111.101] | Port:[13618] | [Blocked]
[2006-09-05 08:34:59] | From:[201.250.162.126] | Port:[13618] | [Blocked]
[2006-09-05 08:35:00] | From:[75.13.36.118] | Port:[13618] | [Blocked]
[2006-09-05 08:35:03] | From:[213.182.104.67] | Port:[13618] | [Blocked]
[2006-09-05 08:35:03] | From:[83.203.152.79] | Port:[13618] | [Blocked]
[2006-09-05 08:35:04] | From:[212.20.172.24] | Port:[13618] | [Blocked]
[2006-09-05 08:35:05] | From:[67.81.87.80] | Port:[13618] | [Blocked]
[2006-09-05 08:35:05] | From:[151.203.59.70] | Port:[13618] | [Blocked]
[2006-09-05 08:35:17] | From:[88.106.79.217] | Port:[13618] | [Blocked]
[2006-09-05 08:35:18] | From:[69.140.39.116] | Port:[13618] | [Blocked]
[2006-09-05 08:35:18] | From:[220.240.161.122] | Port:[13618] | [Blocked]
[2006-09-05 08:35:35] | From:[82.159.101.196] | Port:[13618] | [Blocked]
[2006-09-05 08:35:37] | From:[85.137.87.202] | Port:[13618] | [Blocked]
[2006-09-05 08:35:40] | From:[84.140.192.187] | Port:[13618] | [Blocked]
[2006-09-05 08:35:40] | From:[71.138.118.219] | Port:[13618] | [Blocked]
[2006-09-05 08:35:52] | From:[84.60.58.235] | Port:[13618] | [Blocked]
[2006-09-05 08:35:54] | From:[64.81.44.140] | Port:[13618] | [Blocked]
[2006-09-05 08:35:58] | From:[203.214.12.135] | Port:[13618] | [Blocked]
[2006-09-05 08:36:02] | From:[68.160.207.114] | Port:[13618] | [Blocked]
[2006-09-05 08:36:07] | From:[80.171.7.55] | Port:[13618] | [Blocked]
[2006-09-05 08:36:12] | From:[68.201.25.153] | Port:[13618] | [Blocked]
[2006-09-05 08:36:14] | From:[62.233.142.133] | Port:[13618] | [Blocked]
[2006-09-05 08:36:14] | From:[80.202.78.140] | Port:[13618] | [Blocked]
[2006-09-05 08:36:16] | From:[203.87.203.214] | Port:[13618] | [Blocked]
[2006-09-05 08:36:28] | From:[84.132.101.94] | Port:[13618] | [Blocked]
[2006-09-05 08:36:29] | From:[88.72.214.93] | Port:[13618] | [Blocked]
[2006-09-05 08:36:31] | From:[209.89.66.70] | Port:[13618] | [Blocked]
[2006-09-05 08:36:31] | From:[83.135.181.247] | Port:[13618] | [Blocked]
[2006-09-05 08:36:36] | From:[211.28.215.242] | Port:[13618] | [Blocked]
[2006-09-05 08:36:40] | From:[68.71.244.122] | Port:[13618] | [Blocked]
[2006-09-05 08:36:40] | From:[76.16.18.158] | Port:[13618] | [Blocked]
[2006-09-05 08:36:43] | From:[68.46.72.221] | Port:[13618] | [Blocked]
[2006-09-05 08:36:45] | From:[86.133.39.186] | Port:[13618] | [Blocked]
[2006-09-05 08:36:46] | From:[195.80.124.214] | Port:[13618] | [Blocked]
[2006-09-05 08:36:51] | From:[84.176.244.85] | Port:[13618] | [Blocked]
[2006-09-05 08:36:54] | From:[219.83.41.147] | Port:[13618] | [Blocked]
[2006-09-05 08:36:57] | From:[220.233.5.226] | Port:[13618] | [Blocked]
[2006-09-05 08:36:58] | From:[83.221.86.145] | Port:[13618] | [Blocked]
[2006-09-05 08:36:59] | From:[69.26.221.199] | Port:[13618] | [Blocked]
[2006-09-05 08:37:00] | From:[85.85.161.145] | Port:[13618] | [Blocked]
[2006-09-05 08:37:00] | From:[219.74.249.141] | Port:[13618] | [Blocked]
[2006-09-05 08:37:02] | From:[67.70.149.180] | Port:[13618] | [Blocked]
[2006-09-05 08:37:02] | From:[200.89.150.220] | Port:[13618] | [Blocked]
[2006-09-05 08:37:03] | From:[70.48.8.84] | Port:[13618] | [Blocked]
[2006-09-05 08:37:09] | From:[87.218.148.217] | Port:[13618] | [Blocked]
[2006-09-05 08:37:11] | From:[87.160.215.75] | Port:[13618] | [Blocked]
[2006-09-05 08:37:11] | From:[66.31.177.193] | Port:[13618] | [Blocked]
[2006-09-05 08:37:12] | From:[87.219.234.254] | Port:[13618] | [Blocked]
[2006-09-05 08:37:18] | From:[67.170.104.62] | Port:[13618] | [Blocked]
[2006-09-05 08:37:25] | From:[68.97.136.116] | Port:[13618] | [Blocked]
[2006-09-05 08:37:25] | From:[71.76.26.28] | Port:[13618] | [Blocked]
[2006-09-05 08:37:28] | From:[65.191.7.99] | Port:[13618] | [Blocked]
[2006-09-05 08:37:28] | From:[59.114.137.96] | Port:[139] | [Blocked]
[2006-09-05 08:37:28] | From:[72.139.20.5] | Port:[13618] | [Blocked]
[2006-09-05 08:37:37] | From:[87.196.164.34] | Port:[13618] | [Blocked]
[2006-09-05 08:37:42] | From:[201.212.183.89] | Port:[13618] | [Blocked]
[2006-09-05 08:37:43] | From:[67.86.199.231] | Port:[13618] | [Blocked]
[2006-09-05 08:37:48] | From:[201.135.73.3] | Port:[13618] | [Blocked]
[2006-09-05 08:37:52] | From:[66.130.8.69] | Port:[13618] | [Blocked]
[2006-09-05 08:37:55] | From:[81.70.40.46] | Port:[13618] | [Blocked]
[2006-09-05 08:37:56] | From:[83.203.13.146] | Port:[13618] | [Blocked]
[2006-09-05 08:37:57] | From:[85.238.71.19] | Port:[13618] | [Blocked]
[2006-09-05 08:37:58] | From:[71.249.74.153] | Port:[13618] | [Blocked]
[2006-09-05 08:37:58] | From:[68.48.77.118] | Port:[13618] | [Blocked]
[2006-09-05 08:37:58] | From:[65.80.91.124] | Port:[13618] | [Blocked]
[2006-09-05 08:37:59] | From:[70.50.76.205] | Port:[13618] | [Blocked]
[2006-09-05 08:38:05] | From:[58.136.98.129] | Port:[13618] | [Blocked]
[2006-09-05 08:38:10] | From:[68.110.10.123] | Port:[13618] | [Blocked]
[2006-09-05 08:38:14] | From:[80.230.124.196] | Port:[13618] | [Blocked]
[2006-09-05 08:38:21] | From:[24.220.143.117] | Port:[13618] | [Blocked]
[2006-09-05 08:38:28] | From:[201.252.200.138] | Port:[13618] | [Blocked]
[2006-09-05 08:38:28] | From:[60.234.167.153] | Port:[13618] | [Blocked]
[2006-09-05 08:38:32] | From:[69.138.153.126] | Port:[13618] | [Blocked]
[2006-09-05 08:38:32] | From:[86.205.216.215] | Port:[13618] | [Blocked]
[2006-09-05 08:38:35] | From:[82.227.198.138] | Port:[13618] | [Blocked]
[2006-09-05 08:38:37] | From:[85.85.42.57] | Port:[13618] | [Blocked]
[2006-09-05 08:38:38] | From:[82.182.147.58] | Port:[13618] | [Blocked]
[2006-09-05 08:38:40] | From:[58.7.157.137] | Port:[13618] | [Blocked]
[2006-09-05 08:38:42] | From:[84.135.127.88] | Port:[13618] | [Blocked]
[2006-09-05 08:38:44] | From:[80.144.114.187] | Port:[13618] | [Blocked]
[2006-09-05 08:38:45] | From:[71.193.195.83] | Port:[13618] | [Blocked]
[2006-09-05 08:38:48] | From:[80.70.149.124] | Port:[13618] | [Blocked]
[2006-09-05 08:38:51] | From:[24.3.97.248] | Port:[13618] | [Blocked]
[2006-09-05 08:38:55] | From:[81.216.170.40] | Port:[13618] | [Blocked]
[2006-09-05 08:38:55] | From:[161.6.195.221] | Port:[13618] | [Blocked]
[2006-09-05 08:38:57] | From:[72.56.30.75] | Port:[13618] | [Blocked]
 

dysfunction

FH is my second home
Joined
Dec 22, 2003
Messages
9,709
Just turn the notification off and log off...then you dont have to worry...
 

`mongoose

One of Freddy's beloved
Joined
Jan 9, 2004
Messages
957
You weren't playing serious sam at the time were you? Apparantly that uses the same hole.

M
 

TdC

Trem's hunky sex love muffin
Joined
Dec 20, 2003
Messages
30,925
yeah mate, I saw that on several security webbys. no, other than watching the SS:2 demo once apon a time I've not has the game ever :/
 

`mongoose

One of Freddy's beloved
Joined
Jan 9, 2004
Messages
957
might be a new worm wandering around. I know a mate's just had to run 5 different scans on his box after he managed to get his I.E 'modified' by some malicious bits and bobs.

I'd have thought this would had been reported tho - you can't be the only being probed on that port. I did see the odd article or forum post reporting it as a private listening port for some p2p apps

m
 

Will

/bin/su
Joined
Dec 17, 2003
Messages
5,259
A slight change of subject, but I left my PC with Kirsty when I moved out. Its been throughly pwned since then, so I'm going to go reinstall XP on it on Thursday. Any advice as to how I can patch it before it becomes owned again?
 

Alan

Fledgling Freddie
Joined
Aug 3, 2004
Messages
3,972
Will said:
A slight change of subject, but I left my PC with Kirsty when I moved out. Its been throughly pwned since then, so I'm going to go reinstall XP on it on Thursday. Any advice as to how I can patch it before it becomes owned again?

nat your conenction (or just block everything except port 80 to update.microsoft.com)
 

`mongoose

One of Freddy's beloved
Joined
Jan 9, 2004
Messages
957
Will said:
A slight change of subject, but I left my PC with Kirsty when I moved out. Its been throughly pwned since then, so I'm going to go reinstall XP on it on Thursday. Any advice as to how I can patch it before it becomes owned again?

If you download SP2 in advance and install that before connecting your modem you should be ok I think.

M
 

Will

/bin/su
Joined
Dec 17, 2003
Messages
5,259
NAT isn't possible, XP doesn't have a built in firewall. I could d/l SP2. Can I do that on a Mac and burn it to a CD? :)
 

Will

/bin/su
Joined
Dec 17, 2003
Messages
5,259
And what is the point of an operating system that is impossible to install and patch without having another computer to download the patch from?
 

FuzzyLogic

Kicking squealing Gucci little piggy
Joined
Dec 24, 2003
Messages
1,437
You could slipstream SP2 onto the initial install disc, this guide doesn't mention anything windows specific in doing that (except for the OS and patches of course ;)) so it could be done on Mac methinks > http://www.webtree.ca/windowsxp/slipstream.htm.


edit, yes, yes it does, the bloody slipstream software is Windows only, damn you and your Mac, heh.



*ganders more for Mac compliant software*
 

`mongoose

One of Freddy's beloved
Joined
Jan 9, 2004
Messages
957
Will said:
NAT isn't possible, XP doesn't have a built in firewall. I could d/l SP2. Can I do that on a Mac and burn it to a CD? :)

Yep you can do that on a mac, or should be able to - either that or use a usb key

XP does have a built in firewall but only in sp2 and later versions ;)

M
 

Will

/bin/su
Joined
Dec 17, 2003
Messages
5,259
Apart from the slipstreaming apps being windows executables. And we'll not talk about the legitimacy of her copy of XP...

Sounds like SP2 on a CD is the easy option.
 

WPKenny

Resident Freddy
Joined
Dec 22, 2003
Messages
1,348
I've just had a look at my router's logs and I've been getting some hit on 33128 although no where near as much as you Teeds. Just sporadic spamming for a few minutes each day.

EDIT: http://www.seifried.org/security/ports/33000/33128.html

Dunno if that helps. Seems to be saying there's a few remote PC management tools that use that port.
 

FuzzyLogic

Kicking squealing Gucci little piggy
Joined
Dec 24, 2003
Messages
1,437
Aye do that Will, all the slipstreaming on a mac stuff seems to assume you have an intel mac and running bootcamp. About as useful as, well, a Mac really ;)
 

atos

Fledgling Freddie
Joined
Jan 3, 2004
Messages
2,527
Only time I ever had that amount of connection attempts was when I opened port 22. :<
 

Will

/bin/su
Joined
Dec 17, 2003
Messages
5,259
People running an OS which can't be installed without an additional computer or equipment to prevent it being pwned shouldn't really talk smack about my mac. :p
 

Ryuno

Can't get enough of FH
Joined
Mar 10, 2004
Messages
434
You could just buy a legit copy of Windows which would have Sp2 on the disk ;)
 

Will

/bin/su
Joined
Dec 17, 2003
Messages
5,259
Its not my PC, I had a legitimate copy of 2K, now I have a Mac. I wouldn't go back to Windows.
 

nath

Fledgling Freddie
Joined
Dec 22, 2003
Messages
8,009
Will's right on the one hand, it's absurd that you now can't install XP pre SP2 without having SP2 ready on a CD as 2minutes on the net will destroy the system.


That said, having a non NAT'ed internet connection is silly anyway. Internet facing IP addresses are for routers and routers alone thx. USB modems should be banned - either that or all ISPs should start integrating NAT their end and allow you to do port forwarding from a web interface or something.

Hey, that's actually a good idea. Hmm.
 

Tom

I am a FH squatter
Joined
Dec 22, 2003
Messages
17,687
I'm glad I don't understand this thread either.
 

atos

Fledgling Freddie
Joined
Jan 3, 2004
Messages
2,527
nath said:
either that or all ISPs should start integrating NAT their end and allow you to do port forwarding from a web interface or something.

Hey, that's actually a good idea. Hmm.

Good, mind if I steal it? ^^
 

Users who are viewing this thread

Top Bottom