Port 139 Information

Share on:

Information about Port 139

  • This is a collection of basic information about port 139 gathered from various sources, including TCP and UDP services as well as the number of source and target IPs attacked on these ports. This information is up to date as of 2020-12-16.

Description

  • NETBIOS Session Service

tcp

  • Chode
  • GodMessageworm
  • Msinit
  • Netlog
  • Network
  • Qaz
  • SMBRelay
  • Sadmind
  • netbios-ssn

udp

  • netbios-ssn

trojans

  • Chode,
  • trojantd

sources

  • 307

targets

  • 292

etopensource

  • ET_ATTACK_RESPONSE_Weak_Netbios_Lanman_Auth_Challenge_Detected
  • ET_EXPLOIT_Pwdump3e_Password_Hash_Retrieval_port_139
  • GPL_NETBIOS_SMB_Trans2_FIND_FIRST2_response_andx_overflow_attempt
  • GPL_NETBIOS_SMB_Trans2_FIND_FIRST2_response_overflow_attempt
  • GPL_NETBIOS_SMB_repeated_logon_failure
  • GPL_SQL_sa_login_failed

CVEs Associated with Port 139

CVE-2002-2138