Print

Print


In the past couple of months, Išve been seeing increased scans coming from
(what I think to be comprimised machines) in other buildings on campus.  I
informed the managers of the machines and the scans seemed to stop
originating from the original ip addresses.

These two incidences could be related.

LD



From: Laurence Bates <[log in to unmask]>
Reply-To: Laurence Bates <[log in to unmask]>
Date: Tue, 8 Sep 2009 16:42:54 -0400
To: <[log in to unmask]>
Subject: Re: [MSUNAG] Vista/2008/Windows 7 SMB2 BSOD 0Day

Isnšt TCP port 445 stopped at the MSU border?  Stopping it between buildings
could be a problem, especially for Mac users.
 
Laurence
 


From: MSU Network Administrators Group [mailto:[log in to unmask]] On
Behalf Of l duynslager
Sent: Tuesday, September 08, 2009 4:19 PM
To: [log in to unmask]
Subject: [MSUNAG] Vista/2008/Windows 7 SMB2 BSOD 0Day
 
I thought everybody on the list would like to see this.

http://isc.sans.org/diary.html?storyid=7093



LD