Security Incidents mailing list archives

new/old port 135 scans?


From: Brian Collins <listbc () newnanutilities org>
Date: Tue, 13 Jan 2004 00:26:29 -0500

Tonight we're seeing a significant increase in scans on tcp/135. Customers are sending roughly 20 packets to several incremental IPs in a class C, waiting 2 seconds, sending roughly 20 more, etc. I was under the impression that Blaster/Nachi was programmed to cease as of 1/1/04 (of course, I could be wrong about that). I'll try to have some packets available in a little while. In the meantime, has anyone else noticed an increase?

Thanks,
--Brian Collins

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: