[Dshield] MAJOR Jump in Scans to 135/TCP

Jon R. Kibler Jon.Kibler at aset.com
Mon Mar 21 20:41:48 GMT 2005


During the past couple of hours, we have seen a MAJOR jump in the number of scans against TCP/135. Has anyone else?

Over the past few days, scans to this port have averaged something less than 1/3rd of total scans. However, last hour (14:00 US/Eastern, GMT-0500), scans to TCP/135 averaged just under 2/3rds of all scans, and thus far this hour (15:00 - 15:20), the scans are up to just under 3/4ths of all scans. 

Also, the scan rate on a per-10-minute interval, has been consistently increasing since about 14:20. If it continues to rise at the current rate of increase, scans to TCP/135 will account for about 90% of all scans sometime later today.

Anyone else seeing this?

Any idea what new is going on?

Jon Kibler
Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214

Filtered by: TRUSTEM.COM's Email Filtering Service
No Spam. No Viruses. Just Good Clean Email.

More information about the list mailing list