philbot500 Posted May 14, 2007 Share Posted May 14, 2007 Hey all, Just looking at my firewall log and I see loads of ip's hitting those netBIOS/ip ports, 135 seems to be the one and some others, 32904 seems to be popular. tried to google these but all I get is "IM, Nesend and skype" Is there any way to find out who these people are or do they just spoof IP addresses? They seem to come from the same places i.e. 89.243.x.y It isn't an emergency, as my firewall blocks them, so there no trouble to me, but it's all about learning, isn't it? hope for a constructive reply soon, Phil. (Some time later!!) I think this should probably be in the "questions", but I don't know how to move it. Quote Link to comment Share on other sites More sharing options...
Deveant Posted May 15, 2007 Share Posted May 15, 2007 hmm i would say there either zombie machiens or Proxy address's, run a virus scnanner and rootkit scanner to make sure ur not infected and calling out to them (scan ur whole network). Quote Link to comment Share on other sites More sharing options...
Shaun Posted May 15, 2007 Share Posted May 15, 2007 Hey all, Just looking at my firewall log and I see loads of ip's hitting those netBIOS/ip ports, 135 seems to be the one and some others, 32904 seems to be popular. tried to google these but all I get is "IM, Nesend and skype" Is there any way to find out who these people are or do they just spoof IP addresses? They seem to come from the same places i.e. 89.243.x.y It isn't an emergency, as my firewall blocks them, so there no trouble to me, but it's all about learning, isn't it? hope for a constructive reply soon, Phil. (Some time later!!) I think this should probably be in the "questions", but I don't know how to move it. There's no way to find out who they are, but they aren't spoofing their IP address. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.