• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Is this an attack? how to fix?

leedogg

Gojyone kawaiiiiiiii!
#1
I have cable and I think something is screwy with my net connection, my ping sometimes goes all to hell. I'm using the latest version of kpf and under the security logs I get the following "attack" logged every second. Description: "RPC rpc.xfsmd xfs_export attempt UDP" The remote address is different for each attack and the Reference URL is http://www.securityfocus.com/bid/5075

/edit oh forgot the attack class is: rpc-portmap-decode

Go to that reference url provided some information about the "attack" but I'm still confused as to what exactly it is and how to fix it..or even if its a real attack...

Is there something I can do to fix this or is this just random noise? it looks like this exploit is for unix boxes?
 

leedogg

Gojyone kawaiiiiiiii!
#3
Hmm I think I know the culprit...I'm suspecting I installed a malware/trojan of some sort that was initiating this behavior...its called iOO Trace IT and has me very suspicious..
 

leedogg

Gojyone kawaiiiiiiii!
#4
hmmm maybe it wasnt that application after all...these attacks only seemed to crop up after I installed the rc1 of kpf....reverting to b7 gets rid of them...
 

Members online

No members online now.

Latest posts

Latest profile posts

Hello, is there anybody in there? Just nod if you can hear me ...
Xie
What a long strange trip it's been. =)

Forum statistics

Threads
61,961
Messages
673,239
Members
89,014
Latest member
sanoravies