Security Incidents mailing list archives

SMB / NetBIOS Connections


From: "Jonathan R. Dundas" <jonathan () MPCTEXAS COM>
Date: Thu, 27 Jul 2000 16:31:24 -0500

We see constant connection attempts to port 137 to existing hosts on our
subnet, even though the attempts are denied.  Packets claiming to be from
Private/reserved source addys are a significant portion of them, maybe an
average of 1 host a day tries to connect from a private addy.  Weird.  I've
been reading this list for about two months ago on and off, has this topic
been discussed before?

Jonathan


Current thread: