[unisog] sudden increase in NetBIOS probes

Peter Van Epp vanepp at sfu.ca
Mon Jun 7 20:29:23 GMT 2004

	About 51,000 probes (all dropped) between 11 and 12 today against
74,000 a week ago for the same hour, so it looks less here. However back on
Friday we lost some 18 machines to the korgo virus all of which were scanning
very hard on port 445 out (but being dropped at the border router so not 
bothering anyone but me and now the owners of the various machines :-)) so 
you may be seeing fallout from machines infected with that.

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada

On Mon, Jun 07, 2004 at 03:31:50PM -0400, Kathy Bergsma wrote:
> Anyone else seeing a sudden increase in port 445 activity today?
> =============
> Kathy Bergsma
> UF Information Security Manager
> 352-392-2061
> _______________________________________________
> unisog mailing list
> unisog at lists.sans.org
> http://www.dshield.org/mailman/listinfo/unisog

More information about the unisog mailing list