Holy cow! Like 10 over two hours, you say!?! It's more like over two thousand over the past six hours! Could this be some kind of probe by that new BugBear virus (http://vil.nai.com/vil/content/v_99728.htm)? It's said to traverse network shares...
Yours, Joeri -----Original Message----- From: r00t [mailto:[EMAIL PROTECTED]] Sent: dinsdag 1 oktober 2002 19:59 To: Ferry van Steen; [EMAIL PROTECTED] Subject: Re: Increase in port 137 scans YES! I have also noticed a huge increase. For the past 2 days or so my logs are filling. Today alone I have had 60+ attempted connections to 137,udp,from varying ips. Maybe I will take down the wall and sniff a few of these... Why the sudden increase? ----- Original Message ----- From: "Ferry van Steen" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, September 30, 2002 6:58 AM Subject: Increase in port 137 scans > Hey there, > > did anyone else notice a huge increase in port 137 scans (UDP)? Usually I > had perhaps 1 a day of those. Now I've seen atleast 10 in the past 2 hours > alone. > > Kind regards, > > Ferry van Steen > InfoPart Automatisering B.V. > Beeksestraat 24 > 4841 GC Prinsenbeek > The Netherlands > Phone: +31 (0)76 - 5 44 04 11 > Fax: +31 (0)76 - 5 41 83 51 > Mobile: +31 (0)6 - 28 46 47 45 > E-Mail (business): [EMAIL PROTECTED] > E-Mail (private): [EMAIL PROTECTED] > MSN Messenger: [EMAIL PROTECTED] > ICQ (UIN (seldom used)): 191458 > > >
