Hi y'all
I'm getting a few hits on one of our Linux systems from an external
192.168.x.x address.
Now please feel free to correct me but I thought 192.168.x.x addresses were
not permitted on the Internet!! (Class C range)
Yet this firewall is showing the following
Jun 7 05:48:53 mitsi kernel: IP fw-in rej ppp0 UDP 192.168.5.192:137 <our
IP address>:137 L=78 S=0x00 I=50150 F=0x0000 T=105
The hits are in rapid succession (up to 100 trying various IP addresses)
Note the port...
- netbios-ns 137/tcp nbns
- netbios-ns 137/udp nbns
so is this is another illegal Windoze system?
We have had similar attempts from 192.168.1.65 as well.
PS We do use 192.168.0.x addresses ourselves (internally only through a
masquerade) but do not use addresses in the 192.168.1.x or 192.168.5.x
networks. AND we certainly DON'T use Windoze anywhere. (MacOS and Linux).
Your thoughts would be appreciated.
Bruce.
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
