Dear full-disclosure at lists.grok.org.uk,
It seems one is out. Scans TCP/139. Who has a honeypot? :)
--
http://www.security.nnov.ru
/\_/\
{ , . } |\
+--oQQo->{ ^ }<-----+ \
| ZARAZA U 3APA3A } You know my name - look up my number (The Beatles)
+-------------o66o--+ /
|/