[Dshield] massive attack to rpc?

Shawn Cox shawn.cox at pcca.com
Mon Aug 11 19:50:54 GMT 2003


Yes.  The connection attempt causes the RPC service to crash.  In XP the
service is set to reboot the computer 60 seconds later.  Remove you affected
machine fromt the network, patch and re-attach to the network.


----- Original Message ----- 
From: "isaac perez" <pobletman at hotmail.com>
To: <list at dshield.org>
Sent: Monday, August 11, 2003 2:40 PM
Subject: [Dshield] massive attack to rpc?


> Hi,
> I'm new on this list, anyone knows what happens with a problem of rpc that
> makes the system shutdown?
> It seems a massive attack like the old code red, but isnt directed to one
> host, its directed to a large number of host and did by different ips.
> My location its in spain, but i think the "attacker" ips come from
different
> countries, so i suppose it happens the same in "all" the world.
> Thanks, I had reported my logs to dshield.
> And waiting for the notices.....
>
> Sorry for my expressions the english isn't my first language.
>
> _________________________________________________________________
> Dale rienda suelta a tu tiempo libre. Encuentra mil ideas para exprimir tu
> ocio con MSN Entretenimiento. http://entretenimiento.msn.es/
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
>




More information about the list mailing list