[unisog] sudden increase in NetBIOS probes

Russell Fulton r.fulton at auckland.ac.nz
Mon Jun 7 20:19:39 GMT 2004


On Tue, 2004-06-08 at 07:31, Kathy Bergsma wrote:
> Anyone else seeing a sudden increase in port 445 activity today?

no, but there is a lot of discussion about tcp 135 on #unisog channel.
At least one major edu is seeing 10-20Kpps.  They think it is directed
from a bot net. Also others seeing popup on port 1026-1027. (I'm
dropping a lot of 1026-1027).

Russell.
-- 
Russell Fulton, Computer and Network Security Officer.
The University of Auckland, New Zealand.




More information about the unisog mailing list