Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: port 139 scans?

  • From: James Cronin
  • Date: Wed Feb 13 06:50:44 2002

Port 139's the netbios port.

Is the source address in NTL's 80.0.0.0/13 allocation? They're
using those IPs for their broadband always on cable modem customers.

So it's either some idiot script kiddies running port scanners themselves
or unfirewalled fools who've had their Windows boxes hacked.

J.
x

> Is anyone else seing lots of packets being thrown at port 139?
> 
> We're getting 5 or 6 packets a sec, mostly from 80.0.0.0/8 (and all tcp
> syn's).
> 
> -- 
> Internet Vision          Internet Consultancy           Tel: 020 7589 4500
> 60 Albert Court            & Web development            Fax: 020 7589 4522
> Prince Consort Road                                   vision@ivision.co.uk
> London SW7 2BE                                   http://www.ivision.co.uk/
> 




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.