[Wolves] Any Idea whats going on?

[Lee Parkes]

On Tue, Apr 19, 2005 at 12:14:17PM +0100, Peter Cannon wrote:
> 
> Am I being attacked/probed?

<PARANOID>
If you're on the Internet it's safe to assume you're being probed..
</PARANOID>

> Logged 120 packets on interface eth0
>   From 192.168.10.13 - 12 packets to udp(137)

If they are all from 192.168.X.Y addresses then they are RFC1918 compliant, i.e
non-publicy routable addresses. They are the IP ranges you'd use on the inside
of a NAT device. If you're seeing these then most likely the packets are
spoofed so it may be an attempt at a denial of service.

Lee

-- 
--
leep at bogus.net DOC #25 GLASS #136 www.mud-dog.org
I Need A Reason To Stand Up And Fight
Need To Believe What I See - The Silver Drop - Mnemic