1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Any Thoughts on These Disturbing Probes?

Discussion in 'General Security' started by Anchoret, Nov 10, 2007.

Thread Status:
Not open for further replies.
  1. Anchoret

    Anchoret Thread Starter

    Joined:
    Jan 19, 2006
    Messages:
    310
    "Port 31113 is a known vulnerability hole in Windows DNS servers and port 1026 is the vulnerability hack...Microsoft remote administrative privileges allow 'backdooring' into Microsoft operating systems via IP/TCP ports 1024 through 1030.

    "DoD is the US Department of Defense, USAIC is the US Army Information Systems Command. The Australian Department of Defense, IBM, Intel, AT&T and Emirates Telecom are known NSA SIGINT proxies and contractors."

    I also got similar pokes from Halliburton, NASA and the UKMoD. Identical probes are reported elsewhere on the Internet.

    Here are the logs. Thoughts?

    2007-11-08 01:28:22;AT&T Global Network
    Services;32.131.37.13:31113;xxx.xxx.107.83:1026;UDP;Blocked

    2007-11-08 02:18:11;Emirates Telecommunications
    Corporation;195.229.200.93:31113;xxx.xxx.107.83:1026;UDP;Blocked

    2007-11-08
    03:17:51;USAISC;160.139.84.197:31113;xxx.xxx.107.83:1026;UDP;Blocked

    2007-11-08 19:23:54;Intel
    Corporation;192.198.162.254:31139;xxx.xxx.107.109:1026;UDP;Blocked

    2007-11-08 19:47:21;IBM
    Corporation;9.184.117.29:31139;xxx.xxx.107.109:1026;UDP;Blocked

    2007-11-08 21:06:01;Australian Department of
    Defence;146.221.50.105:31139;xxx.xxx.107.109:1026;UDP;Blocked

    2007-11-08 21:12:35;USAISC Eastern
    Area;144.105.17.244:31139;xxx.xxx.107.109:1026;UDP;Blocked

    2007-11-08 21:29:10;DoD Network Information
    Center;29.214.246.94:31138;xxx.xxx.107.108:1026;UDP;Blocked
     
  2. Anchoret

    Anchoret Thread Starter

    Joined:
    Jan 19, 2006
    Messages:
    310
    Awfully quiet in here all of a sudden. :rolleyes:
     
  3. lunarlander

    lunarlander

    Joined:
    Sep 21, 2007
    Messages:
    11,826
    My guess is those various computers are compromised PCs or are part of a botnet. I dont think the Austrailian Dept of Defence will be interested in breaking into your computer.
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/650248

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice