Ray, How is it weird? Are you just seeing the SYN packets, or are you recording the entire session via snort/tcpdump/windump? Have you contacted the owner or upstream? Carv --- Ray Beaulieu <rayat_private> wrote: > anyone else seeing NetBIOS session <TCP 139> scans > from > "somelonghostname.npg.ispchannel.com"? I'm getting > several a week and not > my entire range is being scanned. . > > wierd. > > -Ray > > > > > ---------------------------------------------------------------------------- > This list is provided by the SecurityFocus ARIS > analyzer service. > For more information on this free incident handling, > management > and tracking system please see: > http://aris.securityfocus.com > __________________________________________________ Do You Yahoo!? Make international calls for as low as $.04/minute with Yahoo! Messenger http://phonecard.yahoo.com/ ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Thu Aug 30 2001 - 10:29:36 PDT