[unisog] sudden increase in NetBIOS probes
r.fulton at auckland.ac.nz
Mon Jun 7 20:19:39 GMT 2004
On Tue, 2004-06-08 at 07:31, Kathy Bergsma wrote:
> Anyone else seeing a sudden increase in port 445 activity today?
no, but there is a lot of discussion about tcp 135 on #unisog channel.
At least one major edu is seeing 10-20Kpps. They think it is directed
from a bot net. Also others seeing popup on port 1026-1027. (I'm
dropping a lot of 1026-1027).
Russell Fulton, Computer and Network Security Officer.
The University of Auckland, New Zealand.
More information about the unisog