Re: Unusual volume: UDP:137 probes

From: Maxime Ducharme (maxime@pandore-design.com)
Date: 10/01/02

Previous message: James Sneeringer: "Re: Unusual volume: UDP:137 probes"
Maybe in reply to: Christopher Albert: "Re: Unusual volume: UDP:137 probes"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: "Maxime Ducharme" <maxime@pandore-design.com>
To: "John Sage" <jsage@finchhaven.com>, <incidents@securityfocus.com>
Date: Tue, 1 Oct 2002 17:49:57 -0400

I noticed a raise too on our ADSL link :

Date : number of attemps
20-09-2002 : 4
21-09-2002 : 3
22-09-2002 : 1
23-09-2002 : 1
24-09-2002 : 0
25-09-2002 : 7
26-09-2002 : 8
27-09-2002 : 11
28-09-2002 : 63
29-09-2002 : 46
30-09-2002 : 87
01-10-2002 (until 17h46) : 82

Source IPs are almost all different.

---------------------------------------------------------------
  Maxime Ducharme
  Administrateur reseau, Programmeur
  E-Mail : maxime@pandore-design.com
  Clé publique PGP : http://pandore-design.com/pgp/maxime.asc
  Pandore-Design [http://www.pandore-design.com]
  Tel : (866) 961-9321
  Fax : (866) 961-9943

----- Original Message -----
From: "John Sage" <jsage@finchhaven.com>
To: <incidents@securityfocus.com>
Cc: <handler@incidents.org>
Sent: Sunday, September 29, 2002 7:02 PM
Subject: Unusual volume: UDP:137 probes

> This has received some mention on the UNISOG list and elsewhere, but
> not here.
>
> Some people have been seeing unusually high volumes of UDP:137 probes
> since about 09/27/02 late, or early 09/28/02.
>
> I've seen over 220 since early Saturday morning, PDT, on my dialup.
>
> Funny facts: almost no duplication of source IP address, unless the
> source IP is very close to your own.
>
> Packet contents seem to be "normal".
>
> ACID summaries for my dialup into AT&T's Seattle WA POP follow.
>
> One list is sorted by date-time, the other's sorted by source IP --
> the list sorted by source IP suggests that I'm being probed several times
> by IP's in my 12.82.x.x neigborhood, and almost never more than once
> by IP's from other netblocks.
>
>
> Sorted by date-time:
>
> #103-7| [2002-09-28 07:56:52] 66.166.63.138:1028 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-8| [2002-09-28 08:09:19] 61.38.215.123:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-9| [2002-09-28 08:10:47] 62.30.228.119:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-10| [2002-09-28 08:16:01] 213.99.139.72:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-91| [2002-09-28 08:24:26] 218.233.193.141:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-92| [2002-09-28 08:28:17] 200.48.189.83:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-93| [2002-09-28 08:31:16] 62.251.162.162:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-94| [2002-09-28 08:40:53] 61.224.197.67:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-95| [2002-09-28 08:42:25] 24.141.33.160:1028 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-96| [2002-09-28 08:44:58] 208.169.78.68:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-97| [2002-09-28 08:52:25] 61.41.63.28:1027 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #103-98| [2002-09-28 09:19:18] 24.243.165.244:3292 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-99| [2002-09-28 09:20:42] 65.92.17.40:1028 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #103-100| [2002-09-28 09:27:08] 213.7.99.39:1025 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #103-101| [2002-09-28 09:27:26] 217.82.175.205:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-102| [2002-09-28 09:36:05] 80.138.180.106:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-103| [2002-09-28 09:37:03] 200.67.189.25:1104 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-104| [2002-09-28 10:06:29] 66.127.27.202:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-105| [2002-09-28 10:10:13] 64.231.161.28:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-106| [2002-09-28 10:11:21] 61.33.113.32:1038 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-107| [2002-09-28 10:37:58] 62.194.62.223:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-108| [2002-09-28 11:03:55] 218.148.219.35:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-109| [2002-09-28 11:11:30] 61.37.180.38:1035 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-110| [2002-09-28 11:17:42] 61.230.125.62:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-111| [2002-09-28 11:22:32] 211.53.129.93:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-112| [2002-09-28 11:27:49] 200.4.254.36:1028 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-113| [2002-09-28 11:29:35] 61.32.145.18:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-114| [2002-09-28 11:29:53] 203.79.191.2:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-119| [2002-09-28 11:39:06] 63.105.27.99:1733 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-120| [2002-09-28 11:42:04] 193.152.210.254:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-137| [2002-09-28 12:03:11] 12.82.138.100:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-147| [2002-09-28 12:22:24] 196.32.149.73:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-148| [2002-09-28 12:24:46] 67.34.15.158:1414 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-149| [2002-09-28 12:54:39] 218.234.212.131:1029 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-150| [2002-09-28 12:55:08] 211.254.125.61:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-151| [2002-09-28 13:08:58] 200.73.40.36:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-152| [2002-09-28 13:09:05] 218.165.176.121:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-153| [2002-09-28 13:35:10] 24.87.161.126:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-154| [2002-09-28 13:48:02] 67.81.3.84:1025 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #103-159| [2002-09-28 14:04:12] 211.79.78.87:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-160| [2002-09-28 14:05:56] 80.133.59.196:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-161| [2002-09-28 14:15:01] 210.143.153.199:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-162| [2002-09-28 14:23:25] 200.165.3.201:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-163| [2002-09-28 14:30:52] 200.21.118.184:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-164| [2002-09-28 14:32:28] 200.37.246.68:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-165| [2002-09-28 14:46:03] 12.82.138.3:1025 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #103-166| [2002-09-28 14:56:15] 196.32.85.33:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-167| [2002-09-28 14:57:26] 61.220.28.73:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-169| [2002-09-28 15:12:37] 211.61.148.106:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-170| [2002-09-28 15:19:53] 200.60.196.201:23787 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-171| [2002-09-28 15:22:55] 61.63.51.152:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-176| [2002-09-28 15:31:32] 80.11.48.121:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-177| [2002-09-28 15:33:36] 216.158.216.231:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-80| [2002-09-28 16:35:44] 200.83.19.225:1027 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-81| [2002-09-28 16:48:31] 129.128.162.210:1027 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-82| [2002-09-28 16:50:38] 12.82.128.72:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-83| [2002-09-28 16:51:03] 210.128.128.149:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-84| [2002-09-28 16:53:54] 12.82.129.42:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-85| [2002-09-28 17:08:31] 210.22.136.118:1026 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-86| [2002-09-28 17:27:11] 65.71.148.124:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-87| [2002-09-28 17:36:02] 65.94.26.157:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-88| [2002-09-28 17:37:48] 12.82.128.72:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-89| [2002-09-28 18:31:34] 211.226.59.144:1032 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-90| [2002-09-28 18:52:53] 61.36.89.158:1028 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-91| [2002-09-28 19:03:20] 61.80.175.163:1026 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-92| [2002-09-28 19:17:28] 200.42.50.242:1046 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-100| [2002-09-28 20:58:10] 165.132.67.31:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-101| [2002-09-28 21:03:05] 211.23.234.165:1028 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-102| [2002-09-28 21:03:16] 203.238.205.12:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-103| [2002-09-28 21:03:43] 218.64.90.18:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-104| [2002-09-28 21:24:02] 80.134.230.66:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-105| [2002-09-28 21:53:20] 80.133.63.5:1030 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-106| [2002-09-28 22:17:47] 12.82.129.50:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-107| [2002-09-28 22:33:04] 218.62.2.59:7633 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-108| [2002-09-28 22:38:08] 61.228.5.1:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-109| [2002-09-28 22:40:08] 202.81.172.44:1064 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-110| [2002-09-28 22:54:04] 12.82.129.50:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-111| [2002-09-28 22:56:47] 4.64.2.25:1028 -> 12.82.129.86:137 UDP to
137 netBIOS ns
> #431-112| [2002-09-28 23:08:23] 65.32.210.211:1066 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-113| [2002-09-28 23:09:16] 61.222.224.108:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-114| [2002-09-28 23:09:34] 218.2.202.48:1026 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-115| [2002-09-28 23:10:48] 61.229.200.9:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-116| [2002-09-28 23:24:29] 200.60.167.59:1037 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-117| [2002-09-28 23:31:08] 61.115.187.159:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-118| [2002-09-28 23:36:31] 12.82.129.50:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-119| [2002-09-29 00:15:46] 61.37.137.99:1026 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-120| [2002-09-29 00:24:54] 213.23.70.19:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #432-81| [2002-09-29 00:31:37] 66.137.212.202:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-82| [2002-09-29 00:33:08] 12.82.129.50:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-83| [2002-09-29 00:37:59] 217.83.75.148:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-84| [2002-09-29 00:41:07] 61.167.140.47:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-85| [2002-09-29 00:42:08] 211.183.97.55:1055 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-86| [2002-09-29 00:50:55] 81.65.96.196:1028 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-87| [2002-09-29 01:06:05] 12.82.128.72:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-88| [2002-09-29 01:07:45] 211.38.201.178:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-89| [2002-09-29 01:18:37] 62.90.135.170:1030 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-90| [2002-09-29 01:24:29] 218.13.23.195:3793 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-91| [2002-09-29 01:26:11] 61.176.40.115:1028 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-92| [2002-09-29 01:28:16] 210.162.221.164:5508 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-93| [2002-09-29 01:33:54] 61.171.236.177:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-94| [2002-09-29 01:38:39] 61.82.96.48:1029 -> 12.82.129.211:137 UDP
to 137 netBIOS ns
> #432-95| [2002-09-29 01:54:40] 61.225.197.147:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-96| [2002-09-29 01:57:55] 12.82.129.4:1025 -> 12.82.129.211:137 UDP
to 137 netBIOS ns
> #432-109| [2002-09-29 02:38:11] 211.210.225.119:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-111| [2002-09-29 02:45:02] 12.82.129.4:1025 -> 12.82.129.211:137 UDP
to 137 netBIOS ns
> #432-112| [2002-09-29 02:45:29] 61.205.141.173:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-113| [2002-09-29 02:55:40] 203.109.147.35:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-114| [2002-09-29 03:19:10] 61.217.39.189:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-115| [2002-09-29 03:24:05] 219.164.154.117:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-117| [2002-09-29 04:08:34] 210.102.18.84:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-143| [2002-09-29 06:52:06] 213.77.163.46:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-144| [2002-09-29 07:02:53] 61.221.106.86:1027 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-145| [2002-09-29 08:11:31] 24.232.27.10:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-146| [2002-09-29 08:12:45] 151.38.171.219:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-147| [2002-09-29 08:15:51] 210.182.57.54:1030 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-148| [2002-09-29 08:18:05] 64.223.174.70:1237 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-149| [2002-09-29 08:19:32] 217.208.55.127:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-150| [2002-09-29 08:24:43] 64.40.60.107:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-1| [2002-09-29 08:37:05] 218.228.56.200:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-2| [2002-09-29 08:38:12] 218.50.200.100:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-3| [2002-09-29 08:40:27] 61.177.224.204:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-4| [2002-09-29 08:51:30] 200.177.90.128:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-5| [2002-09-29 08:54:25] 211.221.27.220:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-6| [2002-09-29 08:59:30] 200.64.227.90:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-7| [2002-09-29 09:11:39] 24.234.144.154:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-8| [2002-09-29 09:24:30] 211.199.97.169:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-62| [2002-09-29 09:27:12] 62.251.141.125:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-148| [2002-09-29 09:30:10] 203.73.238.151:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-155| [2002-09-29 09:30:31] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-156| [2002-09-29 09:30:36] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-157| [2002-09-29 09:30:43] 211.224.77.44:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-158| [2002-09-29 09:30:51] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-159| [2002-09-29 09:31:16] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-198| [2002-09-29 09:31:52] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-530| [2002-09-29 09:50:26] 200.62.17.107:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-651| [2002-09-29 10:07:07] 12.82.138.64:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-652| [2002-09-29 10:13:32] 61.221.168.213:1031 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-653| [2002-09-29 10:13:50] 64.154.100.120:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-654| [2002-09-29 10:20:42] 67.234.201.166:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-655| [2002-09-29 10:42:26] 80.230.66.175:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-656| [2002-09-29 10:51:12] 12.82.136.242:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-657| [2002-09-29 10:53:19] 61.231.65.1:1025 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #433-658| [2002-09-29 10:54:59] 200.207.165.253:1048 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-659| [2002-09-29 10:56:47] 210.208.32.20:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-666| [2002-09-29 10:59:57] 200.11.177.226:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-667| [2002-09-29 11:06:16] 217.128.249.217:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-668| [2002-09-29 11:06:59] 212.68.242.133:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-669| [2002-09-29 11:10:33] 62.24.85.147:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-670| [2002-09-29 11:16:28] 64.228.217.15:1030 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-671| [2002-09-29 11:18:09] 208.225.13.226:137 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-672| [2002-09-29 11:18:11] 208.225.13.226:137 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-673| [2002-09-29 11:18:12] 208.225.13.226:137 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-674| [2002-09-29 11:25:19] 68.112.82.159:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-675| [2002-09-29 11:26:06] 218.234.32.141:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-676| [2002-09-29 11:26:11] 211.254.165.170:1091 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-677| [2002-09-29 11:31:03] 62.135.34.54:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-678| [2002-09-29 11:33:43] 211.92.141.222:62982 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-679| [2002-09-29 11:39:04] 12.82.136.242:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-680| [2002-09-29 11:45:34] 80.59.31.251:1029 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-681| [2002-09-29 11:46:31] 200.151.41.32:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-682| [2002-09-29 11:47:31] 200.153.44.30:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-683| [2002-09-29 11:48:04] 218.148.158.138:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-684| [2002-09-29 11:57:03] 80.96.66.176:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-685| [2002-09-29 12:00:14] 206.155.89.227:1049 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-686| [2002-09-29 12:13:32] 216.97.197.119:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-687| [2002-09-29 12:14:26] 217.228.158.35:62496 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-688| [2002-09-29 12:20:31] 213.7.9.37:1025 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #433-689| [2002-09-29 12:22:14] 62.7.161.149:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-690| [2002-09-29 12:23:42] 12.82.136.242:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-691| [2002-09-29 12:27:44] 61.85.20.29:1025 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #433-692| [2002-09-29 12:29:55] 62.82.30.86:1025 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #433-693| [2002-09-29 12:33:03] 24.150.37.190:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-694| [2002-09-29 12:37:28] 12.82.137.38:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-695| [2002-09-29 12:39:43] 216.166.202.180:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-696| [2002-09-29 12:41:17] 212.119.76.183:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-697| [2002-09-29 12:51:06] 65.40.41.46:1026 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #433-698| [2002-09-29 12:51:11] 200.158.14.28:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-699| [2002-09-29 12:56:36] 129.24.47.169:1865 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-703| [2002-09-29 12:58:24] 200.86.8.135:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-713| [2002-09-29 13:08:00] 209.110.39.109:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-714| [2002-09-29 13:09:18] 24.76.134.85:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-724| [2002-09-29 13:11:00] 209.19.160.183:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-725| [2002-09-29 13:13:01] 12.82.137.38:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-726| [2002-09-29 13:17:08] 12.84.20.221:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-727| [2002-09-29 13:17:30] 200.10.65.195:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-729| [2002-09-29 13:21:25] 200.84.42.204:1952 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-730| [2002-09-29 13:24:07] 12.82.138.70:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-731| [2002-09-29 13:24:25] 62.21.22.84:1028 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #433-732| [2002-09-29 13:27:27] 210.65.69.33:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-733| [2002-09-29 13:27:59] 12.82.138.75:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-734| [2002-09-29 13:29:59] 151.29.71.235:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-735| [2002-09-29 13:31:03] 203.218.56.195:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-736| [2002-09-29 13:50:18] 62.251.200.71:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-737| [2002-09-29 13:50:56] 12.82.136.69:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-738| [2002-09-29 14:11:07] 194.255.255.2:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-739| [2002-09-29 14:32:10] 65.184.192.17:1030 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-740| [2002-09-29 14:41:13] 61.61.123.226:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-741| [2002-09-29 14:48:54] 24.25.202.86:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-742| [2002-09-29 14:52:28] 195.56.51.31:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-743| [2002-09-29 14:52:39] 218.45.93.23:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-744| [2002-09-29 14:52:54] 142.177.48.90:1030 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-745| [2002-09-29 14:57:23] 216.241.97.168:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-746| [2002-09-29 15:06:30] 211.224.162.148:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-747| [2002-09-29 15:11:06] 66.139.197.189:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-748| [2002-09-29 15:25:34] 198.144.172.40:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-749| [2002-09-29 15:30:16] 218.148.255.28:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-750| [2002-09-29 15:30:21] 211.142.173.132:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
>
>
> Sorted by source IP:
>
> #431-82| [2002-09-28 16:50:38] 12.82.128.72:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-88| [2002-09-28 17:37:48] 12.82.128.72:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #432-87| [2002-09-29 01:06:05] 12.82.128.72:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
>
> #432-111| [2002-09-29 02:45:02] 12.82.129.4:1025 -> 12.82.129.211:137 UDP
to 137 netBIOS ns
> #432-96| [2002-09-29 01:57:55] 12.82.129.4:1025 -> 12.82.129.211:137 UDP
to 137 netBIOS ns
>
> #431-84| [2002-09-28 16:53:54] 12.82.129.42:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
>
> #432-82| [2002-09-29 00:33:08] 12.82.129.50:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #431-106| [2002-09-28 22:17:47] 12.82.129.50:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-110| [2002-09-28 22:54:04] 12.82.129.50:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-118| [2002-09-28 23:36:31] 12.82.129.50:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
>
> #433-656| [2002-09-29 10:51:12] 12.82.136.242:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-679| [2002-09-29 11:39:04] 12.82.136.242:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-690| [2002-09-29 12:23:42] 12.82.136.242:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
>
> #433-737| [2002-09-29 13:50:56] 12.82.136.69:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
>
> #433-694| [2002-09-29 12:37:28] 12.82.137.38:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-725| [2002-09-29 13:13:01] 12.82.137.38:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
>
> #103-137| [2002-09-28 12:03:11] 12.82.138.100:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-165| [2002-09-28 14:46:03] 12.82.138.3:1025 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #433-651| [2002-09-29 10:07:07] 12.82.138.64:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-730| [2002-09-29 13:24:07] 12.82.138.70:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-733| [2002-09-29 13:27:59] 12.82.138.75:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-726| [2002-09-29 13:17:08] 12.84.20.221:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-81| [2002-09-28 16:48:31] 129.128.162.210:1027 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #433-699| [2002-09-29 12:56:36] 129.24.47.169:1865 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-744| [2002-09-29 14:52:54] 142.177.48.90:1030 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-734| [2002-09-29 13:29:59] 151.29.71.235:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-146| [2002-09-29 08:12:45] 151.38.171.219:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #431-100| [2002-09-28 20:58:10] 165.132.67.31:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #103-120| [2002-09-28 11:42:04] 193.152.210.254:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-738| [2002-09-29 14:11:07] 194.255.255.2:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-742| [2002-09-29 14:52:28] 195.56.51.31:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-147| [2002-09-28 12:22:24] 196.32.149.73:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-166| [2002-09-28 14:56:15] 196.32.85.33:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-748| [2002-09-29 15:25:34] 198.144.172.40:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-727| [2002-09-29 13:17:30] 200.10.65.195:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-666| [2002-09-29 10:59:57] 200.11.177.226:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-681| [2002-09-29 11:46:31] 200.151.41.32:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-682| [2002-09-29 11:47:31] 200.153.44.30:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-698| [2002-09-29 12:51:11] 200.158.14.28:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-162| [2002-09-28 14:23:25] 200.165.3.201:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-4| [2002-09-29 08:51:30] 200.177.90.128:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-658| [2002-09-29 10:54:59] 200.207.165.253:1048 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-163| [2002-09-28 14:30:52] 200.21.118.184:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-164| [2002-09-28 14:32:28] 200.37.246.68:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-92| [2002-09-28 19:17:28] 200.42.50.242:1046 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #103-112| [2002-09-28 11:27:49] 200.4.254.36:1028 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-92| [2002-09-28 08:28:17] 200.48.189.83:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-116| [2002-09-28 23:24:29] 200.60.167.59:1037 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #103-170| [2002-09-28 15:19:53] 200.60.196.201:23787 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-530| [2002-09-29 09:50:26] 200.62.17.107:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-6| [2002-09-29 08:59:30] 200.64.227.90:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-103| [2002-09-28 09:37:03] 200.67.189.25:1104 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-151| [2002-09-28 13:08:58] 200.73.40.36:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-80| [2002-09-28 16:35:44] 200.83.19.225:1027 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #433-729| [2002-09-29 13:21:25] 200.84.42.204:1952 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-703| [2002-09-29 12:58:24] 200.86.8.135:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-109| [2002-09-28 22:40:08] 202.81.172.44:1064 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #432-113| [2002-09-29 02:55:40] 203.109.147.35:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-735| [2002-09-29 13:31:03] 203.218.56.195:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-102| [2002-09-28 21:03:16] 203.238.205.12:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #433-148| [2002-09-29 09:30:10] 203.73.238.151:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-114| [2002-09-28 11:29:53] 203.79.191.2:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-685| [2002-09-29 12:00:14] 206.155.89.227:1049 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-96| [2002-09-28 08:44:58] 208.169.78.68:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
>
> #433-671| [2002-09-29 11:18:09] 208.225.13.226:137 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-672| [2002-09-29 11:18:11] 208.225.13.226:137 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-673| [2002-09-29 11:18:12] 208.225.13.226:137 -> 12.82.137.251:137
UDP to 137 netBIOS ns
>
> #433-713| [2002-09-29 13:08:00] 209.110.39.109:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-724| [2002-09-29 13:11:00] 209.19.160.183:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-117| [2002-09-29 04:08:34] 210.102.18.84:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #431-83| [2002-09-28 16:51:03] 210.128.128.149:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #103-161| [2002-09-28 14:15:01] 210.143.153.199:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #432-92| [2002-09-29 01:28:16] 210.162.221.164:5508 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-147| [2002-09-29 08:15:51] 210.182.57.54:1030 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-659| [2002-09-29 10:56:47] 210.208.32.20:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-85| [2002-09-28 17:08:31] 210.22.136.118:1026 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #433-732| [2002-09-29 13:27:27] 210.65.69.33:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-750| [2002-09-29 15:30:21] 211.142.173.132:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-85| [2002-09-29 00:42:08] 211.183.97.55:1055 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-8| [2002-09-29 09:24:30] 211.199.97.169:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-109| [2002-09-29 02:38:11] 211.210.225.119:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-5| [2002-09-29 08:54:25] 211.221.27.220:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-746| [2002-09-29 15:06:30] 211.224.162.148:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-157| [2002-09-29 09:30:43] 211.224.77.44:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-89| [2002-09-28 18:31:34] 211.226.59.144:1032 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #431-101| [2002-09-28 21:03:05] 211.23.234.165:1028 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #103-150| [2002-09-28 12:55:08] 211.254.125.61:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-676| [2002-09-29 11:26:11] 211.254.165.170:1091 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-88| [2002-09-29 01:07:45] 211.38.201.178:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #103-111| [2002-09-28 11:22:32] 211.53.129.93:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-169| [2002-09-28 15:12:37] 211.61.148.106:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-159| [2002-09-28 14:04:12] 211.79.78.87:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-678| [2002-09-29 11:33:43] 211.92.141.222:62982 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-696| [2002-09-29 12:41:17] 212.119.76.183:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #174-62| [2002-09-27 06:59:38] 212.54.195.211:1026 -> 12.82.129.8:137
UDP to 137 netBIOS ns
> #433-668| [2002-09-29 11:06:59] 212.68.242.133:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-120| [2002-09-29 00:24:54] 213.23.70.19:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #432-143| [2002-09-29 06:52:06] 213.77.163.46:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-688| [2002-09-29 12:20:31] 213.7.9.37:1025 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #103-100| [2002-09-28 09:27:08] 213.7.99.39:1025 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #103-10| [2002-09-28 08:16:01] 213.99.139.72:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-177| [2002-09-28 15:33:36] 216.158.216.231:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-695| [2002-09-29 12:39:43] 216.166.202.180:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-745| [2002-09-29 14:57:23] 216.241.97.168:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-686| [2002-09-29 12:13:32] 216.97.197.119:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-667| [2002-09-29 11:06:16] 217.128.249.217:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-149| [2002-09-29 08:19:32] 217.208.55.127:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-687| [2002-09-29 12:14:26] 217.228.158.35:62496 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-101| [2002-09-28 09:27:26] 217.82.175.205:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #432-83| [2002-09-29 00:37:59] 217.83.75.148:1026 -> 12.82.129.211:137 U
DP to 137 netBIOS ns
> #432-90| [2002-09-29 01:24:29] 218.13.23.195:3793 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-683| [2002-09-29 11:48:04] 218.148.158.138:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-108| [2002-09-28 11:03:55] 218.148.219.35:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-749| [2002-09-29 15:30:16] 218.148.255.28:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-152| [2002-09-28 13:09:05] 218.165.176.121:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-114| [2002-09-28 23:09:34] 218.2.202.48:1026 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #433-1| [2002-09-29 08:37:05] 218.228.56.200:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-91| [2002-09-28 08:24:26] 218.233.193.141:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-149| [2002-09-28 12:54:39] 218.234.212.131:1029 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-675| [2002-09-29 11:26:06] 218.234.32.141:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-743| [2002-09-29 14:52:39] 218.45.93.23:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-2| [2002-09-29 08:38:12] 218.50.200.100:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-107| [2002-09-28 22:33:04] 218.62.2.59:7633 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-103| [2002-09-28 21:03:43] 218.64.90.18:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #432-115| [2002-09-29 03:24:05] 219.164.154.117:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #103-95| [2002-09-28 08:42:25] 24.141.33.160:1028 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-693| [2002-09-29 12:33:03] 24.150.37.190:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-145| [2002-09-29 08:11:31] 24.232.27.10:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-7| [2002-09-29 09:11:39] 24.234.144.154:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-98| [2002-09-28 09:19:18] 24.243.165.244:3292 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-741| [2002-09-29 14:48:54] 24.25.202.86:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-714| [2002-09-29 13:09:18] 24.76.134.85:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-153| [2002-09-28 13:35:10] 24.87.161.126:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-111| [2002-09-28 22:56:47] 4.64.2.25:1028 -> 12.82.129.86:137 UDP to
137 netBIOS ns
> #431-117| [2002-09-28 23:31:08] 61.115.187.159:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #432-84| [2002-09-29 00:41:07] 61.167.140.47:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-93| [2002-09-29 01:33:54] 61.171.236.177:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-91| [2002-09-29 01:26:11] 61.176.40.115:1028 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-3| [2002-09-29 08:40:27] 61.177.224.204:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-112| [2002-09-29 02:45:29] 61.205.141.173:1026 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #432-114| [2002-09-29 03:19:10] 61.217.39.189:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #103-167| [2002-09-28 14:57:26] 61.220.28.73:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #432-144| [2002-09-29 07:02:53] 61.221.106.86:1027 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-652| [2002-09-29 10:13:32] 61.221.168.213:1031 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-113| [2002-09-28 23:09:16] 61.222.224.108:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #103-94| [2002-09-28 08:40:53] 61.224.197.67:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #432-95| [2002-09-29 01:54:40] 61.225.197.147:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #431-108| [2002-09-28 22:38:08] 61.228.5.1:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-115| [2002-09-28 23:10:48] 61.229.200.9:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #103-110| [2002-09-28 11:17:42] 61.230.125.62:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-657| [2002-09-29 10:53:19] 61.231.65.1:1025 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #103-113| [2002-09-28 11:29:35] 61.32.145.18:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-106| [2002-09-28 10:11:21] 61.33.113.32:1038 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-90| [2002-09-28 18:52:53] 61.36.89.158:1028 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-119| [2002-09-29 00:15:46] 61.37.137.99:1026 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #103-109| [2002-09-28 11:11:30] 61.37.180.38:1035 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-8| [2002-09-28 08:09:19] 61.38.215.123:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-97| [2002-09-28 08:52:25] 61.41.63.28:1027 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #433-740| [2002-09-29 14:41:13] 61.61.123.226:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-171| [2002-09-28 15:22:55] 61.63.51.152:1027 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-91| [2002-09-28 19:03:20] 61.80.175.163:1026 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #432-94| [2002-09-29 01:38:39] 61.82.96.48:1029 -> 12.82.129.211:137 UDP
to 137 netBIOS ns
> #433-691| [2002-09-29 12:27:44] 61.85.20.29:1025 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #433-677| [2002-09-29 11:31:03] 62.135.34.54:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-107| [2002-09-28 10:37:58] 62.194.62.223:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-731| [2002-09-29 13:24:25] 62.21.22.84:1028 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #433-669| [2002-09-29 11:10:33] 62.24.85.147:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-62| [2002-09-29 09:27:12] 62.251.141.125:1026 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-93| [2002-09-28 08:31:16] 62.251.162.162:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-736| [2002-09-29 13:50:18] 62.251.200.71:1027 -> 12.82.137.251:137
UDP to 137 netBIOS ns
>
> #103-9| [2002-09-28 08:10:47] 62.30.228.119:1026 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-155| [2002-09-29 09:30:31] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-156| [2002-09-29 09:30:36] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-158| [2002-09-29 09:30:51] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-159| [2002-09-29 09:31:16] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-198| [2002-09-29 09:31:52] 62.30.228.119:1922 -> 12.82.137.251:137
UDP to 137 netBIOS ns
>
> #433-689| [2002-09-29 12:22:14] 62.7.161.149:1028 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-692| [2002-09-29 12:29:55] 62.82.30.86:1025 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #432-89| [2002-09-29 01:18:37] 62.90.135.170:1030 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #103-119| [2002-09-28 11:39:06] 63.105.27.99:1733 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-653| [2002-09-29 10:13:50] 64.154.100.120:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-148| [2002-09-29 08:18:05] 64.223.174.70:1237 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-670| [2002-09-29 11:16:28] 64.228.217.15:1030 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-105| [2002-09-28 10:10:13] 64.231.161.28:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #432-150| [2002-09-29 08:24:43] 64.40.60.107:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-739| [2002-09-29 14:32:10] 65.184.192.17:1030 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #431-112| [2002-09-28 23:08:23] 65.32.210.211:1066 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #433-697| [2002-09-29 12:51:06] 65.40.41.46:1026 -> 12.82.137.251:137 UDP
to 137 netBIOS ns
> #431-86| [2002-09-28 17:27:11] 65.71.148.124:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #103-99| [2002-09-28 09:20:42] 65.92.17.40:1028 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #431-87| [2002-09-28 17:36:02] 65.94.26.157:1025 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #103-104| [2002-09-28 10:06:29] 66.127.27.202:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #432-81| [2002-09-29 00:31:37] 66.137.212.202:1025 -> 12.82.129.211:137
UDP to 137 netBIOS ns
> #433-747| [2002-09-29 15:11:06] 66.139.197.189:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-7| [2002-09-28 07:56:52] 66.166.63.138:1028 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-654| [2002-09-29 10:20:42] 67.234.201.166:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-148| [2002-09-28 12:24:46] 67.34.15.158:1414 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-154| [2002-09-28 13:48:02] 67.81.3.84:1025 -> 12.82.137.228:137 UDP
to 137 netBIOS ns
> #433-674| [2002-09-29 11:25:19] 68.112.82.159:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #103-176| [2002-09-28 15:31:32] 80.11.48.121:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #103-160| [2002-09-28 14:05:56] 80.133.59.196:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #431-105| [2002-09-28 21:53:20] 80.133.63.5:1030 -> 12.82.129.86:137 UDP
to 137 netBIOS ns
> #431-104| [2002-09-28 21:24:02] 80.134.230.66:1025 -> 12.82.129.86:137
UDP to 137 netBIOS ns
> #103-102| [2002-09-28 09:36:05] 80.138.180.106:1025 -> 12.82.137.228:137
UDP to 137 netBIOS ns
> #433-655| [2002-09-29 10:42:26] 80.230.66.175:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-680| [2002-09-29 11:45:34] 80.59.31.251:1029 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #433-684| [2002-09-29 11:57:03] 80.96.66.176:1025 -> 12.82.137.251:137
UDP to 137 netBIOS ns
> #432-86| [2002-09-29 00:50:55] 81.65.96.196:1028 -> 12.82.129.211:137
UDP to 137 netBIOS ns
>
>
>
>
> - John
> --
> "It's a troll! Run!^H^H^H^H Laugh!"
>
> PGP key: http://www.finchhaven.com/pages/gpg_pubkey.html
> Fingerprint: C493 9F26 05A9 6497 9800 4EF6 5FC8 F23D 35A4 F705
>
> --------------------------------------------------------------------------

-- > This list is provided by the SecurityFocus ARIS analyzer service. > For more information on this free incident handling, management > and tracking system please see: http://aris.securityfocus.com >

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com

Previous message: James Sneeringer: "Re: Unusual volume: UDP:137 probes"
Maybe in reply to: Christopher Albert: "Re: Unusual volume: UDP:137 probes"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

NetBIOS could be used as network flood amplier
... such as NetBIOS Name Server can be used to flood ... Sending a Netbios Name Request to a broadcast address on an insecure ... network (for 'insecure' I mean a network that does not filter packets ... list of broadcast addresses in order to flood a victim host with UDP data. ...
(Bugtraq)
Re: Which Ports To Open On W2K3 Server
... The obvious misses are RPC, plus a port for RPC Netlogon/NTDS ... replication; 389/TCP for LDAP. ... NetBIOS stuff is redundant and can be ... > UDP 67 ...
(microsoft.public.windows.server.security)
Which Ports To Open On W2K3 Server
... I wish to use to built-in Internet Connection Firewall for Server 2003 and I ... TCP and UDP 88 ... TCP 3268 ... UDP 137 (NetBIOS Name Server) ...
(microsoft.public.windows.server.security)
Re: Kerio PF - Incomming Connection Alerts
... Programme die mich anlügen brauche ich nicht (das "stealth" kann sich das Programm sonst wohin ... NetBios war bei mir schon deaktiviert. ... NetBIOS (Datagram Service) 138 / UDP ...
(de.comp.security.firewall)
RE: Strange Message
... > the NetBIOS Auditing Tool to enumerate all of your logon accounts and do ... > This list is provided by the SecurityFocus ARIS analyzer service. ... > and tracking system please see: http://aris.securityfocus.com ...
(Incidents)