[Dshield] What are microsoft up to

Rick Leske rick at jaray.net
Sat Jun 7 20:38:43 GMT 2003


On the subject of paranoia........

Ya.. dido that..  Last week I freaked out when my local w2k started
connecting to there ms update site via port 80.  "I don't have the auto
update feature enabled."  ~ Actually I had it disable via the services gui
and the background intel transfer set to manual.  I've blocked i/o to the
suspect IP block 64.124.82.0-64.124.82.255.

~Rick

----- Original Message ----- 
From: Mark Rowlands
To: list at dshield.org
Sent: Saturday, June 07, 2003 2:38 AM
Subject: [Dshield] What are microsoft up to


On the subject of paranoia........

Since Jun 6 21.00 gmt, I am getting two or threee unsolicitated UDP probes
to
53 (dns)  every hour from 8 different sources on two networks, all
registered
to Microsoft. 207.46.150.0  and 207.46.245.0.......

Haven't had these before, havent installed any new MS software (on that date
anyway)...any thoughts?

_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.

___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.




More information about the list mailing list