[Dshield] Just touching base

Geoff Shively gshively at pivx.com
Thu Aug 14 21:57:38 GMT 2003


Have seen a slight increase in Scandinavia, but nothing too big. Denmark saw
some numbers going up, but they returned to the slowing trend within a few
hours.

Cheers,

Geoff Shively, CHO
PivX Solutions, LLC

Are You Secure?
http://www.pivx.com

----- Original Message ----- 
From: "Sten-Arne Zerpe" <zerpe at zerpe.ath.cx>
To: "General DShield Discussion List" <list at dshield.org>
Sent: Thursday, August 14, 2003 2:38 PM
Subject: Re: [Dshield] Just touching base


> On Thu, 14 Aug 2003 16:32:04 -0400.
> With the Message-ID:
> <9F3B43C638622B45B013654517B61D9B064B00 at banana-jr-6k.nmefdn.org>
> And the Organization Header: .
> The famous author: "Paul Marsh" <pmarsh at nmefdn.org>.
> Wrote on the subject: [Dshield] Just touching base:
>
> >It's been relatively quiet about one probe every 5-10 minutes but in the
last hour it seems to be increasing to a probe every  1-2 minutes, anyone
else seeing an increase?
> >
> >Thanx, Paul
> >
>
> Yes I have noticed the same here in Sweden at 217.215.X.X. Aug 12th was
> the worst so far, then yesterday it slowed down a bit. Today begun fairly
> slow with not that many hits on 135, but the last couple of hours it
> seems to be back at about the same hitrate as I noticed on Aug 12th, if
> not even higher.
>
> 99% of all hits on port 135 though, comes from the same netblock as I'm
> on, that is 217.215.X.X. That seems to be exactly what should be
> expected, judging from how this worm is written.
>
> Sten-Arne
>
>
>
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
http://www.dshield.org/mailman/listinfo/list
>




More information about the list mailing list