Matt Miller wrote:
> On Thu, 2002-12-12 at 15:32, jeff wrote:
>
>> Has anyone else noticed an increase in port scans in the last few
>>hours? I am getting around 40 hits an hour, almost all of them on 137.
>>Is there a new worm making the rounds or what?
>
>
> It's just the netbios name-service -- pretty normal on a public "LAN"
> like RR. Could be just a result of the average joe without any type of
> firewall protecting their Windows boxes.
I was just curious because I usually only get a few hits per day, then
all of a sudden I started getting hundreds for no apparent reason. I did
WHOIS lookups on some of them and most of the machines traced back to
Asia and Spain, with a few in South Africa. The wide geographic spread
seemed to be the activity of a worm.
Jeff
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 19:11:53 EDT