RE: port 137 scans
Hey yall. I have seen this happening to my windows workstations as well
lately. Here's an article that might shed a little more light on the
subject.
http://mynetwatchman.com/kb/security/articles/popupspam/netsend.htm
J.J.
-----Original Message-----
From: Russell Coker [mailto:russell@coker.com.au]
Sent: Monday, October 28, 2002 8:22 AM
To: Scott
Cc: Debian ISP
Subject: Re: port 137 scans
On Mon, 28 Oct 2002 15:11, Scott wrote:
> They are SPAM messages being set to the Windows Messenger service. We
> got several clients who were blasted with: "Get Your Degree" in a
> windows pop-up. There are spam utilities that now do this.
The technical description linked from the Wired article on the topic
says that
it's port 135. Does the spam use both ports 135 and 137?
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux
packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
--
To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
Reply to: