Attack? Need you guys to confirm?

[presidente]

---

Im browsing in the web, gone to some site, then my Security software detects this s couple of times...



I traced the IP and it says



do you guys have an idea what PLDT is doing?

Your comments?

SALAMAT

[presidente]

ohh no.. this what i found..

Viruslist.com - Net-Worm.Win32.Kido

update nalngmo daan sa inyo windows...

[r0mm3L]

so many worms exploits this kind of vulnerability

naa koy laboratory ani. naa koy software nga mo exploit ani nga vulnerability.

guess what, i was able to access the unpatched remote computer using VNC bypassing username and password

must update Microsoft Security Bulletin MS08-067 – Critical: Vulnerability in Server Service Could Allow Remote Code Execution (958644)

[Chipmunk888]

thanks for the heads up.

anyway, this is something not new to pldt. i believe they don't filter their network to avoid end user limitations. port 445 is one of the most commonly attacked port as it has far too many exposed and or unpatched windows systems, or simply exposed with unsecured file or resource shares.

they even spoil, i believe their configuration, other certain vulnerability port, i forgot what was it, and destroys connectivity as well as the whole operating system if not updated or using firewall.

[presidente]

hehehe, ang ila firewall "any-any" ang policy? lusot tanan..walay wenta