At 11:31 PM 10/12/2002 -0400, Mike McCandless wrote: >I have seen an increase in (unsolicited) traffic to port 137 at my >firewall. ... A quick google search turns up this "There has been an increase in scanning for port 137 (Netbios SMB service). This has two sources, an increase in awareness among script kiddies of the ability to discover information about a target host using NBTSTAT and the spread of an internet worm known as network.vbs. ..." See the source at http://www.sans.org/newlook/resources/IDFAQ/port_137.htm Fred Avolio Consulting, Inc. 16228 Frederick Road, PO Box 609, Lisbon, MD 21765, US +1 410-309-6910 (voice) +1 410-309-6911 (fax) http://www.avolio.com/ _______________________________________________ firewall-wizards mailing list firewall-wizardsat_private http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
This archive was generated by hypermail 2b30 : Sun Oct 13 2002 - 05:38:42 PDT