[45708] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: port 139 scans?

daemon@ATHENA.MIT.EDU (Stephen J. Wilcox)
Wed Feb 13 06:42:05 2002

Date: Wed, 13 Feb 2002 11:41:41 +0000 (GMT)
From: "Stephen J. Wilcox" <steve@opaltelecom.co.uk>
To: Jasper Wallace <jasper@ivision.co.uk>
Cc: nanog@merit.edu
In-Reply-To: <Pine.GSO.4.30.0202131132180.26254-100000@avengers.ivision.co.uk>
Message-ID: <Pine.LNX.4.21.0202131141220.28198-100000@staff.opaltelecom.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu


we get loads all the time

do you mean its abnormally high or you've only just checked, noticed them
and highlighted it?

Steve

On Wed, 13 Feb 2002, Jasper Wallace wrote:

> 
> 
> Is anyone else seing lots of packets being thrown at port 139?
> 
> We're getting 5 or 6 packets a sec, mostly from 80.0.0.0/8 (and all tcp
> syn's).
> 
> 

-- 
Stephen J. Wilcox
IP Services Manager, Opal Telecom
http://www.opaltelecom.co.uk/
Tel: 0161 222 2000
Fax: 0161 222 2008


home help back first fref pref prev next nref lref last post