tech-security: random connections on TCP port: 139

Subject: random connections on TCP port: 139
To: 'tech-security@netbsd.org' <tech-security@netbsd.org>
From: Tony Hernadez <tony@cne-inc.com>
List: tech-security
Date: 09/11/2000 11:49:47

  by mail.netbsd.org with SMTP; 11 Sep 2000 15:38:58 -0000
	id <S31HL1W1>; Mon, 11 Sep 2000 11:49:50 -0400
Message-ID: <E10D54F27C6AD11196EF00600812C5CF067EA8@CNENT>
From: Tony Hernadez <tony@cne-inc.com>
To: "'tech-security@netbsd.org'" <tech-security@netbsd.org>
Subject: random connections on TCP port: 139
Date: Mon, 11 Sep 2000 11:49:47 -0400
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"

Can someone shine some light on why my server is always getting netbios
connections from random computers on atlantic.net's dial up lines ? here are
some clips:

attackalert: Connect from host: jcvmfl-as-1-ip-41.atlantic.net/209.208.19.72
to TCP port: 139
attackalert: Connect from host:
mtldfl-as-3-ip-08.atlantic.net/209.208.45.135 to TCP port: 139
attackalert: Connect from host:
ocalflifanb-as-2-r1-ip-583.atlantic.net/209.208.10.75 to TCP port: 139
attackalert: Connect from host: jcvmfl-as-1-ip-42.atlantic.net/209.208.19.73
to TCP port: 139

I really do not think that these are actually attacks on this server but..
It is getting annoying. Anyone run into something like this?

cheers,
--
Tony Hernandez
Network Engineer
Computer Network Experts