RE: Unusual volume: UDP:137 probes

From: Mark Forsyth (
Date: 10/01/02

From: Mark Forsyth <>
To: "'Emeric Miszti'" <>, "" <>
Date: Tue, 1 Oct 2002 10:55:51 +1000

On Tuesday, October 01, 2002 1:55 AM, Emeric Miszti [] wrote:


> Been seeing exactly the same spike with same patterns. Up from 40 odd scans on
> 28/9/2002 to 495 already today.

Up until 01-Oct 10:50 (Aust. EST) I've seen 349. The rate is increasing fairly quickly.

> have picked this up at the Internet Storm Center
> No explanations or reasons been given by anyone yet.

There _may_ be an explanation here:-

I sure would like to stick a honeypot somewhere and see what happens.

Mark F...

This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: