25 Aug
2003
25 Aug
'03
12:33 a.m.
Ian Douglas wrote:
Hi Folks,
I have just checked my firewall log and found it packed full of Port 135 probes. It looks like they have been occurring two or three times per second from a wide variety of IP Addresses throughout all today. Have any other ALUGers been getting inundated with these probes as well?
Ian.
fw root # grep -c DPT=445 /var/log/firewall 117199 fw root # grep -c DPT=135 /var/log/firewall 65082
I think it's the Blaster worm.
Cheers, Laurie.
--
--------------------------------------------------------------------
Laurie Brown
laurie@brownowl.com
--------------------------------------------------------------------