[31551] in North American Network Operators' Group
RE: Port 139 scans
daemon@ATHENA.MIT.EDU (Roeland M.J. Meyer)
Thu Sep 28 01:48:31 2000
Message-ID: <1148622BC878D411971F0060082B042C373C@hawk.lvrmr.mhsc.com>
From: "Roeland M.J. Meyer" <rmeyer@MHSC.com>
To: Randy Bush <randy@psg.com>, John Fraizer <nanog@EnterZone.Net>
Cc: nanog@merit.edu
Date: Wed, 27 Sep 2000 22:45:25 -0700
MIME-Version: 1.0
Content-Type: text/plain
Errors-To: owner-nanog-outgoing@merit.edu
> >> a large number of random hosts scanning through their
> >> address space using TCP
> >> on port 139?
> > We have been seeing this for about 3 weeks now.
>
> s/weeks/years/
Yes, but definitely a recent upsurge in this activity. I have three
clients reporting same. Storm's a brewin'.
