[45708] in North American Network Operators' Group
Re: port 139 scans?
daemon@ATHENA.MIT.EDU (Stephen J. Wilcox)
Wed Feb 13 06:42:05 2002
Date: Wed, 13 Feb 2002 11:41:41 +0000 (GMT)
From: "Stephen J. Wilcox" <steve@opaltelecom.co.uk>
To: Jasper Wallace <jasper@ivision.co.uk>
Cc: nanog@merit.edu
In-Reply-To: <Pine.GSO.4.30.0202131132180.26254-100000@avengers.ivision.co.uk>
Message-ID: <Pine.LNX.4.21.0202131141220.28198-100000@staff.opaltelecom.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
we get loads all the time
do you mean its abnormally high or you've only just checked, noticed them
and highlighted it?
Steve
On Wed, 13 Feb 2002, Jasper Wallace wrote:
>
>
> Is anyone else seing lots of packets being thrown at port 139?
>
> We're getting 5 or 6 packets a sec, mostly from 80.0.0.0/8 (and all tcp
> syn's).
>
>
--
Stephen J. Wilcox
IP Services Manager, Opal Telecom
http://www.opaltelecom.co.uk/
Tel: 0161 222 2000
Fax: 0161 222 2008