[Dshield] UDP 137 Scans

Jon R. Kibler Jon.Kibler at aset.com
Tue Aug 12 19:21:34 GMT 2003


We are getting whacked pretty good by 137/UDP scans -- a different block of 3 to 7 IPs in rapid succession every few minutes. Presently, these scans are outnumbering 135/TCP scans by a factor of 2 or 3 to 1.

These are being blocked on our DSL router and I have no easy way of doing a packet capture or submitting logs.

This all started about noon EDT.

Any idea what is going on here?

Jon R. Kibler
A.S.E.T., Inc.
Charleston, SC  USA

More information about the list mailing list