On Fri, Dec 11, 1998 at 09:49:55AM -0500, wrote:
> On Fri, 11 Dec 1998, R. Argentini wrote:
> >
> >WHERE DO THEY COME FROM?
> >
> >I would like to hear all your opinions.
> >If you need more information please ask.
> >Furthermore i should tell you that i checked all the hosts on out local
> >net, and no-one is misconfigged to use the abovementione IP address.
> >
> >Thanks.
>
> Looks like BackOrifice to me. To learn more about BackOrifice go to:
It's not Back Orifice. It's Windows doing NetBIOS name lookups, and is very
likely completely harmless. On my FreeBSD boxes, I see zillions of these
attempted connections to UDP 137. I don't know beans about WINS, but from what
I've read on other lists, if you set Windows NT to use WINS for DNS resolution,
or DNS for WINS resolution, or some such thing, it'll attempt to do a NetBIOS
name lookup any time it does a DNS lookup. Hence the UDP 137 packets.
Chris
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]
