Re: port 445 probes continued

port 445 is also an attack vector for RPC-DCOM and 445 is only found on 2k/ xp / 2k3 as well.
as a side note, ASP running on IIS links to dcom functions, and port 80 is also another vector.
with the prevelance of the dcom exploit, i imagine the port 445 scan is a side affect of routine exploit fingerprinting from would-be attackers.

Donnie Werner
morning_wood@e2-labs.com
http://e2-labs.com

visit http://exploitlabs.com and http://nothackers.org/about.php

• Original Message ----- From: "Incist" <incist@popsikle.net> To: "wirepair" <wirepair@roguemail.net>; <incidents@securityfocus.com> Sent: Friday, August 08, 2003 3:28 PM Subject: Re: port 445 probes continued

> 445 is Microsoft's DS Port. Someone is looking for Microsoft Networking

--

> -------------------------------------------------------------------------

---

>

>


---------------------------------------------------------------------------
----------------------------------------------------------------------------