Snort results

[Daniel D Jones <ddjones@riddlemaster.org>]

Can anyone comment on what might cause the following activity:

Events from same host to same destination using same method
=========================================================================
 # of  from             to               method
=========================================================================
   96  1.2.3.4   84.5.81.228      NETBIOS SMB repeated logon failure
   71  1.2.3.4   24.167.93.19     NETBIOS SMB-DS repeated logon failure
    5   1.2.3.4   24.167.93.19     NETBIOS SMB repeated logon failure
    4   1.2.3.4   212.63.131.194   NETBIOS SMB-DS repeated logon failure

1.2.3.4 is actually the IP address of my server.  It's a NAT server with both 
Linux and Windows machines behind it.