nanog mailing list archives

RE: Port 139 scans


From: "Roeland M.J. Meyer" <rmeyer () MHSC com>
Date: Wed, 27 Sep 2000 22:45:25 -0700


a large number of random hosts scanning through their 
address space using TCP
on port 139?
We have been seeing this for about 3 weeks now.

s/weeks/years/

Yes, but definitely a recent upsurge in this activity. I have three
clients reporting same. Storm's a brewin'.



Current thread: