nanog mailing list archives
RE: port 139 scans?
From: "Steve Smith" <ssmith () freeliant com>
Date: Wed, 13 Feb 2002 09:03:11 -0600
There is a new trojan called ANTZ that scans this port. We have seen a ton of these. -----Original Message----- From: Jasper Wallace [mailto:jasper () ivision co uk] Sent: Wednesday, February 13, 2002 5:38 AM To: nanog () merit edu Subject: port 139 scans? Is anyone else seing lots of packets being thrown at port 139? We're getting 5 or 6 packets a sec, mostly from 80.0.0.0/8 (and all tcp syn's). -- Internet Vision Internet Consultancy Tel: 020 7589 4500 60 Albert Court & Web development Fax: 020 7589 4522 Prince Consort Road vision () ivision co uk London SW7 2BE http://www.ivision.co.uk/
Current thread:
- port 139 scans? Jasper Wallace (Feb 13)
- Re: port 139 scans? Stephen J. Wilcox (Feb 13)
- Re: port 139 scans? Jasper Wallace (Feb 13)
- Re: port 139 scans? James Cronin (Feb 13)
- <Possible follow-ups>
- RE: port 139 scans? Steve Smith (Feb 13)
- Re: port 139 scans? Stephen J. Wilcox (Feb 13)