RE: all port scan attack!?

  • From: "Danny" <uesse@xxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 26 Oct 2002 23:47:12 +0200

Hi Farshad,

in these weeks a huge amount of computers connected
to the internet are being infected by a worm called
OPASERV . It goes thru opened NetBios ports over the
internet, and then he tries to send itself on other
computers... that's probably why you get so many
requests to port 137, but since you have the firewall
closing the Netbios access you don't have to worry
about :-)

I hope this can help

Danny




Other related posts: