SCOUG-HELP Mailing List Archives

>> Next Message >>

Date:	Tue, 29 Oct 2002 12:36:02 PST7
From:	"Dallas E. Legan" <leganii@surfree.com >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Re: Compare firewall logs

=====================================================
If you are responding to someone asking for help who
may not be a member of this list, be sure to use the
REPLY TO ALL feature of your email program.
=====================================================

> *=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-*
> Message: B0000556056.MSG # in packet :#56.
> Date: Mon, 28 Oct 2002 12:32:46 PST7
> From: Peter Skye
> Reply-To: scoug-help@scoug.com
> To: scoug-help@scoug.com
> Subject: SCOUG-Help: Compare firewall logs
> --------------------------------------------------------------------
>
>
> I'm back in town for a while.
>
> My firewall shows that for the past week or so I've been inundated with
> UDP port 137 attempts, at the rate of about one per minute. They are
> coming from everywhere, not any particular IP or group of IP addresses.
>
> I want to know if anyone else is getting hit like this. What do your
> firewall logs look like?
>
> - Peter

Yep, on the Debian box/firewall.
I had about 800 hits total, after sorting and removing duplicates,
it boiled down to about 200 different sites.
137/UDP comes up as 'netbios-nameserver'.
Might be worth while to extract the IP addresses (if that's all you have)
and nslookup on them.

Regards,
Dallas E. Legan II / leganii@surfree.com / dallasii@kincyb.com

Powered by......Lynx, the Internet at hyperkinetic speed.

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"rollin@scoug.com".

=====================================================

Return to [ 29 | October | 2002 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.