[Wolves] Any Idea whats going on?

Peter Cannon peter at cannon-linux.co.uk
Tue Apr 19 12:31:07 BST 2005


Hi All

Am I being attacked/probed?

I'm no firewall/network expert, but I've just had this log message and 
everyone is out here at the moment so I cant ask my guys whats going on.

Am I being paranoid?

I've not seen this before, any ideas?

Logged 120 packets on interface eth0
  From 192.168.10.13 - 12 packets to udp(137)
  From 192.168.10.16 - 3 packets to udp(32922)
  From 192.168.10.17 - 6 packets to udp(137)
  From 192.168.10.19 - 12 packets to udp(137)
  From 192.168.10.22 - 12 packets to udp(137)
  From 192.168.10.67 - 12 packets to udp(137)
  From 192.168.10.70 - 3 packets to udp(137)
  From 192.168.10.82 - 12 packets to udp(137)
  From 192.168.10.140 - 12 packets to udp(137)
  From 192.168.10.169 - 12 packets to udp(137)
  From 192.168.10.180 - 12 packets to udp(137)
  From 192.168.10.253 - 12 packets to udp(137)

I've looked them up on ARIN WHOIS and they are in the USA

-- 
 
Regards,
Peter Cannon.
peter at cannon-linux.co.uk
Fedora Core 3 & Suse Pro 9.2

"There is every excuse for not knowing
there is no excuse for not asking"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mailman.lug.org.uk/pipermail/wolves/attachments/20050419/84d1e933/attachment.bin


More information about the Wolves mailing list