I also have a WinNt4.0 domain with multiple subnets. I also get hits on my firewall from port 138, but from Windows2000 Pro machines in only one specific subnet. I know port 138 is used for NetBIOS Datagram services so I don't think it is virus activity. The destination IP is an old WINS...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.