Security Incidents mailing list archives
RE: Unusual volume: UDP:137 probes
From: "Joseph R. Gruber" <jgruber () tampabay rr com>
Date: Mon, 30 Sep 2002 17:37:47 -0400
While I am only looking at my home network (tampabay.rr.com) here is a list of port 137 probes: Sep 30 (Today up till 5:30PM): 201 Sep 29: 89 Sep 28: 98 Sep 27: 11 Very strange how it's picking up more & more each day -----Original Message----- From: Scott McGee [mailto:scottmcgee () adelphia net] Sent: Monday, September 30, 2002 12:43 PM To: incidents () securityfocus com Subject: Re: Unusual volume: UDP:137 probes Seeing the same thing here on Adelphia.net cable modem network: Sep 18 - 2 Sep 19 - 0 Sep 20 - 0 Sep 21 - 0 Sep 22 - 0 Sep 23 - 1 Sep 24 - 0 Sep 25 - 1 Sep 26 - 2 Sep 27 - 19 Sep 28 - 95 Sep 29 - 146 Sep 30 - 68 up to 9:33 AM PST Scott ----- Original Message ----- From: "Mark Forsyth" <forsythm () optushome com au> Sent: Monday, September 30, 2002 1:33 AM Subject: RE: Unusual volume: UDP:137 probes | | On Monday, September 30, 2002 9:02 AM, John Sage | [SMTP:jsage () finchhaven com] wrote: | > Some people have been seeing unusually high volumes of UDP:137 probes | > since about 09/27/02 late, or early 09/28/02. | | A few people (who log sych things) on the Optus cable network in Australia | have been seeing it too. | In my case since Sep 20 it's gone ... | Sep 20 2 hits | Sep 21, 22, 23 0 hits | Sep 24 3 hits | Sep 25 0 hits | Sep 26 4 hits | Sep 27 2 hits | Sep 28 156 hits Starting at 02:20 (Aust. EST) | Sep 29 410 hits | Sep 30 406 hits up until 18:24 ------------------------------------------------------------------------ ---- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- RE: Unusual volume: UDP:137 probes Bamm (Robert) Visscher (Sep 30)
- <Possible follow-ups>
- Re: Unusual volume: UDP:137 probes Nick FitzGerald (Sep 30)
- RE: Unusual volume: UDP:137 probes Mark Forsyth (Sep 30)
- RE: Unusual volume: UDP:137 probes Joseph R. Gruber (Sep 30)
- Re: Unusual volume: UDP:137 probes Hugo van der Kooij (Sep 30)
- SV: Unusual volume: UDP:137 probes Peter Kruse (Oct 01)
- Re: Unusual volume: UDP:137 probes Christopher Albert (Sep 30)
- RE: Unusual volume: UDP:137 probes Richard . Grant (Oct 01)
- RE: Unusual volume: UDP:137 probes Nick FitzGerald (Oct 03)
- Re: Unusual volume: UDP:137 probes Alain Fauconnet (Oct 04)
- Re: Unusual volume: UDP:137 probes Matt Power (Oct 05)
- RE: Unusual volume: UDP:137 probes Nick FitzGerald (Oct 03)
- RE: Unusual volume: UDP:137 probes Scott, Michael R. (Oct 01)
- Re: Unusual volume: UDP:137 probes Axel Pettinger (Oct 01)
- Re: Unusual volume: UDP:137 probes James Sneeringer (Oct 01)