[Dshield] Sudden Massive increase in DPT=137
jlauro at umflint.edu
Thu Mar 25 14:47:24 GMT 2004
Is there a new virus/worm?
I've just seen a massive increase in traffic SPT=137, DPT=137,
prot=UDP starting around 8AM.
We are blocking an extra 8 million packets an hour right now (varies,
but probably about 5X normal), and it's been going on for almost two
A fair amount of of sources. About 500 in a 1 minute sample, but also
lots of packets from each source... I'll hold onto a one minute
sample and compare later to see if it's the same or different
More information about the list