...

...

a large number of random hosts scanning through their address space using TCP on port 139? We have been seeing this for about 3 weeks now.

s/weeks/years/

Yes, but definitely a recent upsurge in this activity. I have three clients reporting same. Storm's a brewin'.