[Wolves] Any Idea whats going on?

kev adams kev at magicmoon.co.uk
Tue Apr 19 13:39:33 BST 2005


On Tuesday 19 Apr 2005 12:14, Peter Cannon wrote:
>
> Logged 120 packets on interface eth0
>   From 192.168.10.13 - 12 packets to udp(137)
>   From 192.168.10.16 - 3 packets to udp(32922)
>   From 192.168.10.17 - 6 packets to udp(137)
>   From 192.168.10.19 - 12 packets to udp(137)
>   From 192.168.10.22 - 12 packets to udp(137)
>   From 192.168.10.67 - 12 packets to udp(137)
>   From 192.168.10.70 - 3 packets to udp(137)
>   From 192.168.10.82 - 12 packets to udp(137)
>   From 192.168.10.140 - 12 packets to udp(137)
>   From 192.168.10.169 - 12 packets to udp(137)
>   From 192.168.10.180 - 12 packets to udp(137)
>   From 192.168.10.253 - 12 packets to udp(137)
>
> I've looked them up on ARIN WHOIS and they are in the USA

They're all local addresses so unless they're being spoofed somehow I'm pretty 
sure you should be OK.  Adresses in the 192.160.*.* range are reserved for 
use on a local network.

kev



More information about the Wolves mailing list