Attack traffic on MTN's network

[ginggs]

I've been using MTN's 3G/HSDPA service for about a week now after a long break. I've noticed a lot of attack traffic on ports 135, 139 and 445 which appears to come from other MTN users.

Is anyone else seeing this?

 

[SecretCode]

Not 139 but I do notice 135 and 445. Not as frequent as attacks on ADSL, though.

 

[gpe]

I've been using MTN's 3G/HSDPA service for about a week now after a long break. I've noticed a lot of attack traffic on ports 135, 139 and 445 which appears to come from other MTN users.

Is anyone else seeing this?

Yes. Always on Port 139 & 445

Best thing for this if you paranoid though is to restrict anonymous (a null session will can occur and provide access to shared resources to a trusted user but deny enumeration of other user information.)

Regedit

Navigate to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA

RestrictAnonymous = 1
RestrictAnonymousSam = 1
EveryoneIncludesAnonymous = 0


If you're using Windows 2000
RestrictAnonymous = 2

 

[gpe]

I've got to admit though one great thing about 3G on MTN is that you can effectively not bother about a firewall (average user) because of the proxy

It's one area where MTN really rocks !

 

[ginggs]

I've got to admit though one great thing about 3G on MTN is that you can effectively not bother about a firewall (average user) because of the proxy

Well, not any more, if they're allowing you to be attacked by other MTN users, and pay for the privilege.