increase seen in port 135 (MS RPC) scanning

[REN-ISAC <dodpears () INDIANA EDU>]

The level of MS RPC scanning across Abilene increased Wednesday 10/15 by a little more than 2x, and has since fallen 
back to approximately 1.5x. We're investigating the activity. The increase is seen at in-bound connections to Seattle, 
Indianapolis, Chicago, Los Angeles, Denver, and New York Abilene routers, but insignificant at Atlanta, Sunnyvale, 
Washington, and Houston routers.

Graphs are at
http://stryper.uits.iu.edu/icmp/aggregate-hist.cgi?name=rpc


Doug Pearson
Director REN-ISAC
ren-isac () iu edu
http://www.ren-isac.net

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.