Security Incidents mailing list archives
nbname scans
From: RTORTORE () MOBIUS COM (Rick Tortorella)
Date: Mon, 20 Mar 2000 13:34:15 -0500
Has anyone noticed a sudden increase in scans for nbname? I've gotten 3 different scans so far from totally unrelated hosts. 2 American ISPs and 1 Canadian ISP. All within the same 2 hour time period. Two of the scans came from totally different IPs (1 candian and 1 american) but they were timestamped with the exact same times to the tenth of a second and they were scanning the same c class address. I've contacted all three ISPs. I was just wondering if there was a sudden increase due to a new tool that was released over the weekend or if there was a sudden increase in sales of _Hacking Exposed_. Just curious to find out if it's just me who's been singled out or if others are experiencing the same thing today. Sorry, but I can't send log files to the list. :( -Rick
Current thread:
- Syn attacks ?, (continued)
- Syn attacks ? Klavs Klavsen (Mar 28)
- Re: lots of interest in port 109 (POP2) markus tromday (Mar 22)
- Re: lots of interest in port 109 (POP2) Donald McLachlan (Mar 07)
- Re: lots of interest in port 109 (POP2) Paul Rice (Mar 13)
- Munged Napster Sessions Stephen P. Berry (Mar 13)
- Looking for Squid Proxies Cy Schubert - ITSD Open Systems Group (Mar 16)
- Re: Munged Napster Sessions Vanja Hrustic (Mar 16)
- Port 6112 Stuart Staniford-Chen (Mar 17)
- Re: Port 6112 Robert Graham (Mar 20)
- Re: Port 6112 Stuart Staniford-Chen (Mar 20)
- nbname scans Rick Tortorella (Mar 20)
- Port 27960 Stuart Staniford-Chen (Mar 17)
- Re: Port 27960 steve balla (Mar 20)
- Re: Port 27960 Odd Arne Beck (Mar 20)
- Re: Port 27960 David Groves (Mar 21)
- Re: Port 27960 Sean Birkholz (Mar 25)
- Followup Analysis of a Shaft DDoS Node and Master Richard Wash (Mar 28)
- Re: Port 27960 steve balla (Mar 28)
- Re: Port 27960 TJ Jablonowski (Mar 28)
- Re: Munged Napster Sessions simond () IRRELEVANT ORG (Mar 17)
- Re: Munged Napster Sessions Stuart Staniford-Chen (Mar 20)