RE: Odd UDP ports blocked
- From: "Mark Strangways" <strangconst@xxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 12 Sep 2001 16:59:36 -0400
It seemed to be "broadcasting" as well, or am I reading it incorrectly.
----- Original Message -----
From: Shayne Lebrun
To: [ISAserver.org Discussion List]
Sent: Wednesday, September 12, 2001 4:17 PM
Subject: [isalist] RE: Odd UDP ports blocked
http://www.ISAserver.org
Could be as innocuous as somebody's got an NT server live to the internet,
and it's looking for a master browser; could be somebody trying to hackity
smackity you. Hard to say.
-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxx]
Sent: Wednesday, September 12, 2001 4:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Odd UDP ports blocked
http://www.ISAserver.org
Included below is a clip from my Packet filter log. I understand that is is
NOT getting thru, but does
anyone think I should be informing someone of the attack.
Or am I just paranoid ?
Thanks in advance for your responses
Mark
2001-09-12 19:28:22 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:28:32 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:28:38 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:28:42 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:28:52 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:02 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:06 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:07 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:08 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:09 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:10 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:10 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:11 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:12 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:12 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:13 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:14 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:30 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:31:00 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:31:30 169.254.97.143 169.254.255.255 Udp 138 138
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
slebrun@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
