From owner-freebsd-security Tue Nov 9 7:20:59 1999 Delivered-To: freebsd-security@freebsd.org Received: from mppsystems.com (dslmpp.pro-ns.net [208.210.148.205]) by hub.freebsd.org (Postfix) with ESMTP id 96196150F7 for ; Tue, 9 Nov 1999 07:20:34 -0800 (PST) (envelope-from mpp@mppsystems.com) Received: (from mpp@localhost) by mppsystems.com (8.9.3/8.9.3) id GAA07316; Tue, 9 Nov 1999 06:03:20 -0600 (CST) (envelope-from mpp) Date: Tue, 9 Nov 1999 06:03:20 -0600 From: Mike Pritchard To: Lawrence Sica Cc: security@FreeBSD.ORG Subject: Re: Port 137 hitting my server Message-ID: <19991109060320.B7018@mppsystems.com> References: <4.2.2.19991108155541.00bcba40@mail.interactivate.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre3i In-Reply-To: <4.2.2.19991108155541.00bcba40@mail.interactivate.com> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, Nov 08, 1999 at 03:57:01PM -0800, Lawrence Sica wrote: > All, > > I keep getting hits to port 137 on my server. I know this is a netbios > thing, and am not running samba. The server in question is a webserver. I > was wondering any legitimate cause for this? I've noticed a lot of these types of hits after playing around with alladvantage.com (get paid to surf the web!). I have no idea what they are looking for. At least from that particular web site, I haven't seen any real pattern to it, except that I see more of them after making use of their software. -Mike -- Mike Pritchard mpp@FreeBSD.org or mpp@mppsystems.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message