[lug] port 901 scans

[D. Stimits]

The Matt wrote:

> On Mon, 2003-06-02 at 19:48, D. Stimits wrote:
>
> >I'm getting a lot of port 901 scans (samba web admin tool), but I
> >haven't heard of any recent samba vulnerabilities. I'm curious if anyone
> >here has noticed an increase in scans to this port, or has otherwise
> >heard of why this might be increasing?
>
>
> No, you aren't the only one.  Yesterday on Incidents someone mentioned
> the same thing:
>
> http://www.securityfocus.com/archive/75/323580/2003-05-31/2003-06-06/0
>
>
Funny thing, I haven't heard of any web admin tool vulnerabilities 
lately, so it makes me wonder if they're looking for something like 
failure to set a password.

D. Stimits, stimits AT attbi DOT com