[63820] in North American Network Operators' Group
New attack against port 135?
daemon@ATHENA.MIT.EDU (Peter John Hill)
Fri Oct 10 13:27:43 2003
Date: Fri, 10 Oct 2003 13:26:58 -0400
From: Peter John Hill <peterjhill@cmu.edu>
To: nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
I am seeing lots of scanning of port 135 on my network. 66 byte long packets. Anyone have a name for this? It is less aggressive than the welchia
scans I have seen. Seems to scan at about 3000 or so flows per 5 minutes.
Thanks
Peter Hill
Network Engineer
Carnegie Mellon
