[Dshield] Sudden Massive increase in DPT=137

Lauro, John jlauro at umflint.edu
Thu Mar 25 14:47:24 GMT 2004

Is there a new virus/worm?
I've just seen a massive increase in traffic SPT=137, DPT=137,
prot=UDP starting around 8AM.
We are blocking an extra 8 million packets an hour right now (varies,
but probably about 5X normal), and it's been going on for almost two
hours now.  
A fair amount of of sources.  About 500 in a 1 minute sample, but also
lots of packets from each source...  I'll hold onto a one minute
sample and compare later to see if it's the same or different

More information about the list mailing list