GAQM CEH-001 Question Answer
Why would an attacker want to perform a scan on port 137?
To discover proxy servers on a network
To disrupt the NetBIOS SMB service on the target host
To check for file and print sharing on Windows systems
To discover information about a target host using NBTSTAT
Microsoft encapsulates netbios information within TCP/Ip using ports 135-139.It is trivial for an attacker to issue the following command:
nbtstat -A (your Ip address)
From their windows machine and collect information about your windows machine (if you are not blocking traffic to port 137 at your borders).
TESTED 31 Aug 2025
Copyright © 2014-2025 ACE4Sure. All Rights Reserved