[Current] Significantly increased Internet Scan

K Amp kamplifier at gmail.com
Wed Oct 18 15:20:17 GMT 2006


Hi There,

I have been observing since the past weekend that the volume of traffic
scanning for port 137, 139, 445, 1026, 1027 and 1433 have been significantly
increased. Most of the attackers are home based but occassionally there're
seemingly servers judging from their resolved names.

My firewall log only provides very high level details.

I checked www.incidents.org, Dshield.org and other places but failed to
correlate anything.

Anyone out there has the same experience.

Thanks, Kam, GCIA
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.sans.org/pipermail/current/attachments/20061018/f04f90ed/attachment.htm 


More information about the Current mailing list