Hi,
I am new at reading the pix log and I know someone out there can help me
interpret these messages. I started receiving hundreds of messages like
these today. It seems like the address 167.160.241.245 is scanning through
the ports 16000 and higher trying to get to any address in the subnet
12.25.196.0 and 12.25.199.0 on port 137, which is NetBIOS Name Service port.
Does it mean someone is sniffing my network? Thanks.
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16148 to 12.25.196.206/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16148 to 12.25.196.206/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16148 to 12.25.196.206/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16148 to 12.25.196.206/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16310 to 12.25.196.146/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16310 to 12.25.196.146/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16310 to 12.25.196.146/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16310 to 12.25.196.146/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16310 to 12.25.196.146/137 on interface outside
Mar 01 2001 15:23:15: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/16310 to 12.25.196.146/137 on interface outside
....
Mar 01 2001 15:40:54: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/21190 to 12.25.196.74/137 on interface outside
Mar 01 2001 15:40:54: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/21190 to 12.25.196.74/137 on interface outside
Mar 01 2001 15:40:55: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/22044 to 12.25.199.154/137 on interface outside
Mar 01 2001 15:40:55: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/22044 to 12.25.199.154/137 on interface outside
Mar 01 2001 15:40:55: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/21190 to 12.25.196.74/137 on interface outside
Mar 01 2001 15:40:55: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/21190 to 12.25.196.74/137 on interface outside
Mar 01 2001 15:40:55: %PIX-2-106006: Deny inbound UDP from
167.160.241.245/21190 to 12.25.196.74/137 on interface outside
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
