[Wolves] Any Idea whats going on?
Peter Cannon
peter at cannon-linux.co.uk
Tue Apr 19 12:31:07 BST 2005
Hi All
Am I being attacked/probed?
I'm no firewall/network expert, but I've just had this log message and
everyone is out here at the moment so I cant ask my guys whats going on.
Am I being paranoid?
I've not seen this before, any ideas?
Logged 120 packets on interface eth0
From 192.168.10.13 - 12 packets to udp(137)
From 192.168.10.16 - 3 packets to udp(32922)
From 192.168.10.17 - 6 packets to udp(137)
From 192.168.10.19 - 12 packets to udp(137)
From 192.168.10.22 - 12 packets to udp(137)
From 192.168.10.67 - 12 packets to udp(137)
From 192.168.10.70 - 3 packets to udp(137)
From 192.168.10.82 - 12 packets to udp(137)
From 192.168.10.140 - 12 packets to udp(137)
From 192.168.10.169 - 12 packets to udp(137)
From 192.168.10.180 - 12 packets to udp(137)
From 192.168.10.253 - 12 packets to udp(137)
I've looked them up on ARIN WHOIS and they are in the USA
--
Regards,
Peter Cannon.
peter at cannon-linux.co.uk
Fedora Core 3 & Suse Pro 9.2
"There is every excuse for not knowing
there is no excuse for not asking"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.lug.org.uk/pipermail/wolves/attachments/20050419/84d1e933/attachment.bin
More information about the Wolves
mailing list