New attack against port 135?

Peter John Hill peterjhill at cmu.edu
Fri Oct 10 17:26:58 UTC 2003


I am seeing lots of scanning of port 135 on my network. 66 byte long packets. Anyone have a name for this? It is less aggressive than the welchia 
scans I have seen. Seems to scan at about 3000 or so flows per 5 minutes.

Thanks
Peter Hill
Network Engineer
Carnegie Mellon



More information about the NANOG mailing list