[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] UDP Scans
- Subject: RE: [cobalt-security] UDP Scans
- From: shimi <shimi@xxxxxxxxxxxxxxxx>
- Date: Fri, 6 Jul 2001 09:39:39 -0700 (PDT)
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
On Fri, 6 Jul 2001, Simon Wilson wrote:
> This is a small snip of the log. Does this help with the analysis?
> The ***.**.** are the same address as my box. All the scans are UDP port 137
> or 138.
>
>
> Jul 6 14:35:28 ns1 portsentry[9824]: attackalert: UDP scan from host:
> ***.**.**.144/***.**.**.144 to UDP port: 137
> Jul 6 14:35:28 ns1 portsentry[9824]: attackalert: Host:
Other computers on the network running windows searching for other
computers for "network neighbourhood". nothing to worry about.
- shimi.