[Dshield] RE: (Dshield) Reserved Addresses

Toney, Mark mtoney at sodexhoUSA.com
Wed Mar 6 21:55:00 GMT 2002


     Port 137 UDP could be either TROJ_MSINIT.A (see 
     http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MS
     INIT.A) or NETBIOS Name Service. 
     
     Since it's coming from a 10.X.X.X address, would it be safe to assume 
     that Keith's ISP probably has a machine with that address that is 
     sending the queries?
     
     Mark


______________________________ Reply Separator
_________________________________
Subject: (Dshield) Reserved Addresses
Author:  "Keith Gainford" <SMTP:keith.gainford at btopenworld.com> at BUFFALO
Date:    3/6/2002 1:43 PM


I received two Port 137 UDP attacks from addresses within the 10.x.x.x 
block. I am a home user and am not very knowledgable about the reasons for 
Reserved Addresses. Is there any way of finding out where they have come 
from, and who if anyone to report this abuse to.
     
Keith G
     
_______________________________________________ 
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see: 
http://www1.dshield.org/mailman/listinfo/list




More information about the list mailing list