[Dshield] What is the fun of this? Daily 70 packets to 1026 and 1027
Freek de Kruijf
f.de.kruijf at hetnet.nl
Mon Mar 28 18:07:03 GMT 2005
On Monday 28 March 2005 17:14, Johannes B. Ullrich wrote:
> > I wonder why anybody keeps "pounding" my IP-address so consistently
> > and what the fun is of this type of "attack".
> This is popup spam, directed at the Windows Messaging Service (not to
> be confused with 'Microsoft Instant Messenger').
> If you don't have a firewall, you would see a popup that looks very
> much like a windows system message. The Windows Messaging Service is
> usually used to notify users about print jobs that have completed, or
> if a remote administrator is about to shut down the system. So its a
> valid service, but there is no need to expose it to the Internet.
I know all that. However why is this during a month and a half
continuing everyday and still continuing. I can't imagen why that
system/spammer is not using other IP-addresses or is he simply stupid?
More information about the list