[Dshield] [LOGS] UDP:137 probes at 09/29/02 16:05 UTC

Korhonen Juuso juuso.korhonen at camline.fi
Mon Sep 30 04:58:15 GMT 2002


I have been wondering the same thing, I had 249 hits yesterday. 103 hits
today since midnight to 8 o'clock in the morning. All hits are against port
137 and source port is from 1025 to 1028(UDP).



Best Regards

Juuso Korhonen
IT Manager
Camline corporation

***********************************************************
Mobile:           +358 (0)400 550 299 
Office direct:    +358 (0)5 621 4222  
Office:           +358 (0)5 621 4200  
Fax:              +358 (0)5 621 4242
Camline Support:  +358 (0)5 621 4251  

Address:        Ainonkatu 35
                53100  Lappeenranta
                Finland
Mail:           juuso.korhonen at camline.fi   
URL:            <http://www.camline.fi>          
***********************************************************
Radiant, sir, radiant 



-----Original Message-----
From: Michael Vario [mailto:mvario at acedsl.com]
Sent: 30. syyskuuta 2002 04:44
To: list at dshield.org
Subject: Re: [Dshield] [LOGS] UDP:137 probes at 09/29/02 16:05 UTC


>  Been seeing this steadily since Saturday morning, PDT. Current count:
>  121 on my dialup into AT&T's Seattle WA POP, and climbing.
>
>  Has received mention on the UNISOG list.
>
>  dshield is reporting quite a jump:
>
>   2002-09-29  12269  14.35% - and the day's not finished, yet...
>   2002-09-28 201947  10.27%
>   2002-09-27  74649   2.97%
>   2002-09-26  83790   3.22%
>   2002-09-25  84386   2.89%

Ditto, I've had hits on port 137 from over 30 different sources since
midnight last night.  They're being stopped at my router so
I'll have to open that up if I want to look at the packets.

Michael Vario
mvario at acedsl.com

Free Mickey Mouse!!!

"Congress has extended copyright terms 11 times since 1962, each just as the
copyright on the first Mickey Mouse film, Steamboat Willie, was set to
expire."

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
****************************************************************************
This message has been scanned by F-Secure Anti-Virus for Microsoft Exchange.
****************************************************************************




More information about the list mailing list