Monkey.org Developments
Honeyd Mailing List: port 139 scanning

Honeyd Resources

Main - News - Forums 
Download Releases
General Information [Mirror]
Frequently Asked Questions
Sample Configurations
Tools - Service Scripts
Blog - New
Links, Press, etc.
Mailing List Archive
Acknowledgments


Honeyd Research

Immunization Against Worms
Understanding Spam
Performance

Honeypot Resources

Honeypot Background
Honeypot Concepts

Honeypot Books


Virtual Honeypots,
Niels Provos and Thorsten Holz

Happy Hacking

Reduce wishlists
Leave a tip with PayPal

Support Honeyd

Search:
Keywords:

Search Amazon

  		 

port 139 scanning

From: Sumit Siddharth <Sumit.Siddharth_at_eurecom.fr>
Date: Mon, 17 May 2004 16:59:47 +0200



Hi ,


I have found this traffic on my firewall.


I see the Ip 61.111.36.34 connected to my honeyd at port 139 (SMB ,NBBS 


and Tcp).this ip is connected for more than an hour to the same port and 


it make various quieries like :-



Negotiate protocol request[ short frame]


Session setup andx request


Session Request ,to *SMBSERVER <20>



Wat kind of tool is it?


Also as i am a newbie kindly forgive me if I have missed out anything 


really important to mention.


waiting for a quick response


Thanks


Sumit


Received on Mon May 17 2004 - 11:13:39 PDT





















Search For Information











Google








 Search WWW  Search www.honeyd.org 



















NB: This is a filtered version of the Honeypots mailing list. Only posts that concern Honeyd are shown here. For more recent discussions visit the forums.

 











Last modified: June 13 2004 02:53:28 AM


Copyright (c) 1999-2004 by Niels Provos

Don't access my pirated music.