[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: port 137 scans

Hey yall. I have seen this happening to my windows workstations as well
lately. Here's an article that might shed a little more light on the



-----Original Message-----
From: Russell Coker [mailto:russell@coker.com.au] 
Sent: Monday, October 28, 2002 8:22 AM
To: Scott
Cc: Debian ISP
Subject: Re: port 137 scans

On Mon, 28 Oct 2002 15:11, Scott wrote:
> They are SPAM messages being set to the Windows Messenger service.  We

> got several clients who were blasted with: "Get Your Degree" in a 
> windows pop-up.  There are spam utilities that now do this.

The technical description linked from the Wired article on the topic
says that 
it's port 135.  Does the spam use both ports 135 and 137?

http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact

Reply to: