Strange traffic :53 -> :139

Hi there,

Snort caught these 2 packets yesterday evening comming from outside. I
am wondering what this traffic is all about:

19:00:10.289008 157.22.219.3.53 > xx.xxx.xx.xx.139: S [tcp sum ok]
666:666(0) win 128 (ttl 52, id 666, len 40)
0x0000 4500 0028 029a 0000 3406 ac3b 9d16 db03 E..(....4..;....
0x0010 5087 0f5a 0035 008b 0000 029a 0000 0000 P..Z.5..........
0x0020 5002 0080 d40d 0000 P.......

23:13:04.735752 141.30.233.6.53 > xx.xxx.xx.xx.139: S [tcp sum ok]
666:666(0) win 128 (ttl 55, id 666, len 40)
0x0000 4500 0028 029a 0000 3706 ab30 8d1e e906 E..(....7..0....
0x0010 5087 0f5a 0035 008b 0000 029a 0000 0000 P..Z.5..........
0x0020 5002 0080 d602 0000 P.......

Any hints?


Christian

Christian Mund