Re: Help Me figure this out please
From: A. (nospam_at_home.org)
Date: Tue, 10 Feb 2004 20:49:14 +0100
Bit Twister wrote:
> On Mon, 09 Feb 2004 04:41:35 GMT, Joe Shmoe wrote:
>> First, let me butter you up by saying you guys are the greatest.
> Ah, shucks
>> My firewall log has been going nuts today with this entry repeated every
>> couple of seconds. Any idea what it's about? I tried a google but that
>> just confused me even more.
>> Feb 8 20:44:01 dulouz kernel: catch-all IN=eth0 OUT=
>> MAC=00:20:78:10:db:46:00:00:77:95:ed:18:08:00 SRC=18.104.22.168
>> DST=22.214.171.124 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=23183 DF PROTO=TCP
>> SPT=3915 DPT=445 WINDOW=16384 RES=0x00 SYN URGP=0 OPT (020405B401010402)
> host 126.96.36.199 shows that h24-83-185-153.vf.shawcable.net
> is trying destination port 445 on your box.
> grep 445 /etc/services shows
> microsoft-ds 445/tcp
> microsoft-ds 445/udp
Hi, its no Class C, look at this here:
OrgName: Shaw Communications Inc.
Address: Suite 800
Address: 630 - 3rd Ave. SW
NetRange: 188.8.131.52 - 184.108.40.206
NetType: Direct Allocation
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
OrgAbuseName: SHAW ABUSE
OrgTechName: Shaw High-Speed Internet