Port 139 (SMB)

HoneyLabs honeypots recorded 857 probes against destination port 139 (SMB) from 190 distinct source IP addresses in the last 7 days.

First observed 2026-11-08 08:31, most recently 2026-11-15 07:43 (UTC).

What the sensors show

The sources sat in 42 networks across 23 countries. No single address sent more than 16% of them. The largest source network was AS202425 (IP Volume inc), with 37% of the probes from 4 addresses. 12 of the 25 busiest addresses are recognised research scanners.

Most active source addresses

Networks it comes from

Where it comes from

Client strings seen on this port