IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Security Forum / Didja ever use...
Post #64,496
by folkert
Picture of folkert
11/22/02 11:49:37 AM
Reply
New Didja ever use...
Ever use DB2 on that machine?

Cause the "default" search server runs on that port as a service to the localhost only.

Also, the HTML help browser service for Visual Age comes to mind too... I think it was on that port for localhost only also.

Seems NetQuestion (part of UDB) also uses that port... All these products are form the SAME venodr... IBM.
[link|mailto:curley95@attbi.com|greg] - Grand-Master Artist in IT
[link|http://www.iwethey.org/ed_curry/|REMEMBER ED CURRY!!!]

Your friendly Homeland Security Officer reminds:
Hold Thumbprint to Screen for 5 seconds, we'll take the imprint, or
Just continue to type on your keyboard, and we'll just sample your DNA.
Post #64,500
by dmarker2
11/22/02 11:56:46 AM
11/22/02 12:01:24 PM
Reply
New Re: Yes both - still have VA Smalltalk Installed
I thought the number seemed familiar.

Thanks - Doug


#1 - hmmm this post didn't get blocked - the one above got blocked 4 times over 4 hrs until I dialled into to a different ISP port & it got thru.

I am begining to suspect that the entry into my computer may have been thru remote login as I had been using auto start-up for primary user. I have stopped that now & activated requiring ctl-alt-del

I have noticed a steady pattern of pings coming to my computers. Zone Alarm seems to be again picking up this stuff(after I did a reinstall).

Just now thoug, I noticed one of my computers with an alien ip addr with ports 137 & 138 open ???

169.254.174.15

I have no idea what that ip address is

Cheers

Doug
Expand Edited by dmarker2 Nov. 22, 2002, 12:01:24 PM EST
Expand All History
Post #64,524
by Steve Lowe
11/22/02 2:56:03 PM
Reply
New Re: Yes both - still have VA Smalltalk Installed
The 169.254 address is the 'automatic' IP address Micosoft networking gives your machine when it can't find a DHCPish server on the network, or there's no static IP defined. Also, 192.168.x.x is a valid address range to use for an internal network, however 192.10.x.x is not..those are public addresses.
-----
Steve
     Security related - perhaps amusing to some but ... - (dmarker) - (20) - Nov. 20, 2002, 05:35:43 AM EST
         I haf a few questions - (boxley) - (1) - Nov. 20, 2002, 08:54:06 AM EST
             Re: The blocks seem to be getting worse - (dmarker) - Nov. 21, 2002, 09:30:14 AM EST
         Definitely not amusing to me. - (a6l6e6x) - (1) - Nov. 20, 2002, 03:24:35 PM EST
             Re: It isn't as if I post anti - (dmarker) - Nov. 21, 2002, 09:33:27 AM EST
         Re This is getting worse - (dmarker) - (3) - Nov. 22, 2002, 11:26:34 AM EST
             Didja ever use... - (folkert) - (2) - Nov. 22, 2002, 11:49:37 AM EST
                 Re: Yes both - still have VA Smalltalk Installed - (dmarker2) - (1) - Nov. 22, 2002, 12:01:24 PM EST
                     Re: Yes both - still have VA Smalltalk Installed - (Steve Lowe) - Nov. 22, 2002, 02:56:03 PM EST
         Can't we do this over ssl? -NT - (deSitter) - (4) - Nov. 22, 2002, 12:07:23 PM EST
             Re: That seems reasonable - (dmarker) - (3) - Nov. 22, 2002, 12:26:46 PM EST
                 137 138 netbios scans (lotta trolling lately) -NT - (boxley) - (2) - Nov. 22, 2002, 03:28:09 PM EST
                     Re: Have decided to set up an NIDS & Honeypot - (dmarker) - (1) - Nov. 22, 2002, 09:22:45 PM EST
                         Yeppers... - (folkert) - Nov. 22, 2002, 11:01:32 PM EST
         Not at all amusing; sad, really - (rickmoen) - (6) - Nov. 22, 2002, 10:52:24 PM EST
             Re: Not at all amusing; sad, really - (dmarker) - (5) - Nov. 23, 2002, 07:21:13 AM EST
                 Re: Not at all amusing; sad, really - (rickmoen) - (4) - Nov. 23, 2002, 06:53:20 PM EST
                     Re: Rick PS is still there, neibour teachs there ... - (dmarker) - (3) - Nov. 24, 2002, 06:40:48 AM EST
                         WOW!!! Kowloon used o be where cheap lodging was available - (boxley) - (1) - Nov. 24, 2002, 09:36:32 AM EST
                             Re: And cheap girls <grin> - actually ... - (dmarker) - Nov. 24, 2002, 07:28:03 PM EST
                         Re: Rick PS is still there, neibour teachs there ... - (rickmoen) - Nov. 26, 2002, 02:11:18 AM EST

Many of the dead have finished being dead without the assistance of medical staff or fancy equipment.
48 ms