[unisog] sudden increase in NetBIOS probes

Steven Matkoski matkoski at nysernet.org
Tue Jun 8 14:10:21 GMT 2004

Hi Kathy,

I had one of our participants call asking the same question. I looked into some
flow data and noticed their /16 was being scanned during 1pm and 3pm EDT.
Then it stopped. It was the same source address doing the scanning too. I 
them of this but have not any other information back.

At 03:31 PM 6/7/2004, Kathy Bergsma wrote:
>Anyone else seeing a sudden increase in port 445 activity today?
>Kathy Bergsma
>UF Information Security Manager
>unisog mailing list
>unisog at lists.sans.org

More information about the unisog mailing list