Re: Port 137 Hammering

From:
Date: 10/28/02 

Date: Mon, 28 Oct 2002 10:44:21 GMT

Tracker wrote:

>
>
> Steve Zurlo wrote:
>
>> This appears to have started a few weeks ago and has been getting
>> progressively worse, but this morning it's nuts. My logs are showing 50
>> or
>> 60 inbound port 137 hits every hour, all from unique IP addresses. That
>> port is closed on my firewall (of course), so I'm in no danger, but
>> still,
>> I'd love to know what's going on. Anyone have any info on this. Some
>> long forgotten worm with a date trigger or is this something new?
>>
>> Steve Z.
>>
>> (Remove the n from snaz)
>
> It sounds like your system might have been hacked into. You can email me
> to talk.
> You had better make a copy of your hard drive if these hackers took down a
> Network or Server via your computer.
>
> Tracker

Its not hacked into debbie. IF you did any research you'd know what it was.
And as long as he's blocking it at the firewall the incoming can't do
anything.

Relevant Pages