nanog mailing list archives

New attack against port 135?


From: Peter John Hill <peterjhill () cmu edu>
Date: Fri, 10 Oct 2003 13:26:58 -0400


I am seeing lots of scanning of port 135 on my network. 66 byte long packets. Anyone have a name for this? It is less aggressive than the welchia scans I have seen. Seems to scan at about 3000 or so flows per 5 minutes.

Thanks
Peter Hill
Network Engineer
Carnegie Mellon


Current thread: