[Wolves] Any Idea whats going on?
kev adams
kev at magicmoon.co.uk
Tue Apr 19 13:39:33 BST 2005
On Tuesday 19 Apr 2005 12:14, Peter Cannon wrote:
>
> Logged 120 packets on interface eth0
> From 192.168.10.13 - 12 packets to udp(137)
> From 192.168.10.16 - 3 packets to udp(32922)
> From 192.168.10.17 - 6 packets to udp(137)
> From 192.168.10.19 - 12 packets to udp(137)
> From 192.168.10.22 - 12 packets to udp(137)
> From 192.168.10.67 - 12 packets to udp(137)
> From 192.168.10.70 - 3 packets to udp(137)
> From 192.168.10.82 - 12 packets to udp(137)
> From 192.168.10.140 - 12 packets to udp(137)
> From 192.168.10.169 - 12 packets to udp(137)
> From 192.168.10.180 - 12 packets to udp(137)
> From 192.168.10.253 - 12 packets to udp(137)
>
> I've looked them up on ARIN WHOIS and they are in the USA
They're all local addresses so unless they're being spoofed somehow I'm pretty
sure you should be OK. Adresses in the 192.160.*.* range are reserved for
use on a local network.
kev
More information about the Wolves
mailing list