Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

RE: port 139 scans?

  • From: Steve Smith
  • Date: Wed Feb 13 10:14:49 2002

There is a new trojan called ANTZ that scans this port. We have seen a
ton of these.

-----Original Message-----
From: Jasper Wallace [mailto:jasper@ivision.co.uk]
Sent: Wednesday, February 13, 2002 5:38 AM
To: nanog@merit.edu
Subject: port 139 scans?




Is anyone else seing lots of packets being thrown at port 139?

We're getting 5 or 6 packets a sec, mostly from 80.0.0.0/8 (and all tcp
syn's).

-- 
Internet Vision          Internet Consultancy           Tel: 020 7589
4500
60 Albert Court            & Web development            Fax: 020 7589
4522
Prince Consort Road
vision@ivision.co.uk
London SW7 2BE
http://www.ivision.co.uk/





Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.