[Dshield] MAJOR Jump in Scans to 135/TCP

Jon R. Kibler Jon.Kibler at aset.com
Mon Mar 21 20:41:48 GMT 2005


Greetings, 

During the past couple of hours, we have seen a MAJOR jump in the number of scans against TCP/135. Has anyone else?

Over the past few days, scans to this port have averaged something less than 1/3rd of total scans. However, last hour (14:00 US/Eastern, GMT-0500), scans to TCP/135 averaged just under 2/3rds of all scans, and thus far this hour (15:00 - 15:20), the scans are up to just under 3/4ths of all scans. 

Also, the scan rate on a per-10-minute interval, has been consistently increasing since about 14:20. If it continues to rise at the current rate of increase, scans to TCP/135 will account for about 90% of all scans sometime later today.

Anyone else seeing this?

Any idea what new is going on?

THANKS!
Jon Kibler
-- 
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the list mailing list