Results 1 to 7 of 7

Thread: Spoofed IP?

  1. #1
    Miami Dolphins Fan DIDS's Avatar
    Join Date
    Apr 2000
    Location
    Syracuse, New York
    Posts
    947

    Question Spoofed IP?

    I just got these 3 entries in my Linksys logging program:

    Jul 23, 2001 00:07:15.740 UTC 192.168.1.231 : 137 >>> XX.XX.XXX.XXX : 137 NetBIOS Name, Chode, Msinit

    Jul 23, 2001 00:07:17.110 UTC 192.168.1.231 : 137 >>> XX.XX.XXX.XXX : 137 NetBIOS Name, Chode, Msinit

    Jul 23, 2001 00:07:18.700 UTC 192.168.1.231 : 137 >>> XX.XX.XXX.XXX : 137 NetBIOS Name, Chode, Msinit


    The thing is I dont have a PC in my network with a IP like that. I figure this is probably someone trying a spoof to get into my Network. Anyone have any clue if I am right or not?

  2. #2
    yeah

  3. #3
    New Member
    Join Date
    Feb 2000
    Location
    Springfield, MO
    Posts
    49
    i doubt it, it looks like thats a request to get a netbios name table for your ip, and even if someone did spoof it they wouldn't be very smart because in order to get the info back to the person it needs their destination ip, which if spoofed won't ever reach them. it's probably some internal broadcast or something

  4. #4
    R.I.P. 2016-11-23 Croc's Avatar
    Join Date
    Jan 2001
    Location
    Up top East side Downunder
    Posts
    7,819
    The IP 192.168.1.231 you are referring to is internal.
    It is not coming from outside. You're logging an outgoing request from a computer within your own network.
    Hope this helps.

    Croc
    Croc.
    It will be long, it will be hard and there will be no withdrawal.
    Winston Churchill
    Remember: Wherever you go in life, you take yourself with you.

  5. #5
    Miami Dolphins Fan DIDS's Avatar
    Join Date
    Apr 2000
    Location
    Syracuse, New York
    Posts
    947
    It's not a outbound request. It is a inbound request. I only have 2 internal IP address's ending in 100 and 101. The inbound requests never made it past my router.

  6. #6
    R.I.P. 2016-11-23 Croc's Avatar
    Join Date
    Jan 2001
    Location
    Up top East side Downunder
    Posts
    7,819
    DIDS,
    Are you using Virtual Private Networking?
    Just a thought.
    Trying to find a possible for ya!

    Croc.
    Croc.
    It will be long, it will be hard and there will be no withdrawal.
    Winston Churchill
    Remember: Wherever you go in life, you take yourself with you.

  7. #7
    Miami Dolphins Fan DIDS's Avatar
    Join Date
    Apr 2000
    Location
    Syracuse, New York
    Posts
    947
    Nope. I am not using a VPN. They haven't tried again. So it is no real biggie. Just the first time I have ever seen a Inbound connection attempt from a IP like that. Thanks for the replies.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •