[unisog] Unusual volume: UDP:137 probes

Rich Graves rcgraves at brandeis.edu
Tue Oct 1 02:44:03 GMT 2002


Has anyone here isolated the worm?

Might it be this?

 http://www.sarc.com/avcenter/venc/data/w32.opaserv.worm.html

Anyone have an IP address for www.opasoft.com? That might be another way to
trace back with argus/netflow/etc.
-- 
Rich Graves <rcgraves at brandeis.edu>
UNet Systems Administrator



More information about the unisog mailing list