North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Port 139 scans

  • From: Jared Mauch
  • Date: Wed Sep 27 15:16:22 2000

On Wed, Sep 27, 2000 at 11:35:23AM -0700, Ben Browning wrote:
> My current suspicion is that a backdoor trojan (pause here to decline the 
> port 139 attempt that just zipped by me) is on the loose and being 
> propagated like mad. This would certainly fit with the rumour of a huge 
> DDoS attack in the works, as [email protected] l33t [email protected] get as many machines as 
> possible compromised and ready to help the attack.

	It would be interesting to see if this crops up at this nanog
meeting as it did at the San Jose meeting.

	- Jared

--
Jared Mauch  | pgp key available via finger from [email protected]
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.
END OF LINE  | Manager of IP networks built within my own home