PPRuNe Forums - View Single Post - NetBIOS attacks
Thread: NetBIOS attacks
View Single Post
Old 30th Dec 2002, 21:32
  #1 (permalink)  
rob_frost
 
Join Date: Jun 2000
Location: somewhere near you
Posts: 88
Likes: 0
Received 0 Likes on 0 Posts
NetBIOS attacks

I have ZoneAlarm, and I keep getting messages saying this

The firewall has blocked Internet access to your computer (NetBIOS Name) from 24.46.27.205 (UDP Port 1030).

or

The firewall has blocked Internet access to your computer (NetBIOS Name) from 81.4.2.22 (UDP Port 1026).

for example. The IP address varies. I get about 1 a minute. The UDP Port it mentions is usaully between 1025 and 1035, but sometimes its bigger. I click on more info, which takes me to a Zone Alarm page, which says some tried to access port 137. It then mentions something about network traffic. But I'm not on a network at the moment... I am quite a lot of the time, but it happens when I'm not on it????? I have windows 2k.

I read a bit somewhere else saying that it might be a worm scanning your ports. It is quite common apparently. Does this sound like it? Bearing in mind I have to access a network, I can't get rid of all my NetBIOS things, so what should I do? Or is it fine as it is?

I might just be being paranoid, but I'd thought I'd check.

Thanks

Rob
rob_frost is offline