North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: Port 139 scans

  • From: Roeland M.J. Meyer
  • Date: Wed Sep 27 17:40:36 2000

> From: John Fraizer [mailto:[email protected]]
> Sent: Wednesday, September 27, 2000 11:26 AM
> 
> On Wed, 27 Sep 2000, Bill Becker wrote:
> 
> > Speaking of the internet and the way it operates, is anyone 
> else seeing a
> > large number of random hosts scanning through their address 
> space using TCP
> > on port 139?
> > 
> > Bill
> 
> We have been seeing this for about 3 weeks now.

I have too, it looks like they're looking for Windoze and Samba boxen.
That's one of the netbios ports.