Date: Tue, 9 Nov 1999 12:39:45 -0800 From: "David Schwartz" <davids@webmaster.com> To: "David Scheidt" <dscheidt@enteract.com>, "Kris Kennaway" <kris@hub.freebsd.org> Cc: "Mike Pritchard" <mpp@mppsystems.com>, "Lawrence Sica" <larry@mail.interactivate.com>, <chat@freebsd.org> Subject: RE: Port 137 hitting my server Message-ID: <000c01bf2af2$8edfd830$021d85d1@youwant.to> In-Reply-To: <Pine.NEB.3.96.991109141548.91601A-100000@shell-3.enteract.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Usually a port 137 hit means one of two things: 1) Someone is seeing if your server is misconfigured with shared without passwords. 2) Someone accidentally typed in your server name in an Explorer window that caused it to check for shares instead of for web pages. DS > On Tue, 9 Nov 1999, Kris Kennaway wrote: > > > On Tue, 9 Nov 1999, Mike Pritchard wrote: > > > > > I've noticed a lot of these types of hits after playing around > > > with alladvantage.com (get paid to surf the web!). I have no idea > > > what they are looking for. At least from that particular web site, > > > I haven't seen any real pattern to it, except that I see more of them > > > after making use of their software. > > > > The dilbert.com website used to give me reverse port 80 scans > (I think it > > was port 80)..my best guess was that it was either some kind of > > demographic profiling from an advertiser or a spamming business run by > > dogbert looking for addresses. > > The doubleclick people used to do something that looked suspicious, the > claimed purpose of which was to figure out which of their servers you were > closest to, in order to sell you better. I don't remember what it is, and > since *.doubleclick.net looks up as 127.0.0.1 from here, I can't > be bothered > to check. > > David Scheidt > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-chat" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-chat" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000c01bf2af2$8edfd830$021d85d1>