Security Incidents mailing list archives

Spoofed IP trying to connect to port 137

From: Jason <spill98 () NETCENE COM>
Date: Mon, 20 Nov 2000 21:40:42 -0500

Anyone seeing lots of spoofed IP's trying to connect to port 137?  I am
seeing a lot of traffic from spoofed IP's.  They are mainly to port 137 so
maybe it is just a mass search for zombie targets?  They aren't giving up
easily.

A couple of the IP's.

10.1.100.55
100.1.2.1

Jason Lewis
http://www.jasonlewis.net

Current thread:

Spoofed IP trying to connect to port 137 Jason (Nov 22)
- Re: Spoofed IP trying to connect to port 137 Trevor Hawthorn (Nov 24)