[unisog] sudden increase in NetBIOS probes

Steven Matkoski matkoski at nysernet.org
Tue Jun 8 14:10:21 GMT 2004


Hi Kathy,

I had one of our participants call asking the same question. I looked into some
flow data and noticed their /16 was being scanned during 1pm and 3pm EDT.
Then it stopped. It was the same source address doing the scanning too. I 
notified
them of this but have not any other information back.

-s.
At 03:31 PM 6/7/2004, Kathy Bergsma wrote:
>Anyone else seeing a sudden increase in port 445 activity today?
>
>=============
>Kathy Bergsma
>UF Information Security Manager
>352-392-2061
>_______________________________________________
>unisog mailing list
>unisog at lists.sans.org
>http://www.dshield.org/mailman/listinfo/unisog




More information about the unisog mailing list