Security Incidents mailing list archives

Re: Strange Traffic to ports 139 and 137 from a machine with no data


From: "Stephen J. Smoogen" <smooge () gmail com>
Date: Thu, 2 Mar 2006 07:49:48 -0700

On 3/2/06, LE Backup <lucretias () shaw ca> wrote:
Sorry for the oversimplification, but are you saying this is normal?


To clarify.. I do not know if it is normal or not. I do know that it
occured on a very small percentage (less than 0.5%) of "clean"
machines. I am primarily Linux based so I had to go off of the Windows
guys looking at it.

--
Stephen J Smoogen.
CSIRT/Linux System Administrator


Current thread: