RE: [cobalt-users] Attacking from an IP Range

["Ian C. Walmsley" <admin@xxxxxxxxxxxxx>]

> -----Original Message-----
> From: cobalt-users-admin@xxxxxxxxxxxxxxx
> [mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Marc Gear
> Sent: 22 March 2001 01:56
> To: cobalt-users@xxxxxxxxxxxxxxx
> Subject: Re: [cobalt-users] Attacking from an IP Range
> 
> 
> > Portsentry is currently reporting repeated attacks from IP's in 
> the range
> > 192.168.20.0 to 192.168.20.255 - I am sure that this is not a usual IP
> > address range.
> 
> its a bog standard internal IP range. possibly from your internal 
> network as
> its unlikley that it us spoofed packets.  What ports are these IPs
> supposedly 'attacking'?
> --
> /\/\ a R (
> 
Port 111.

We do not use that range of IP's on our lan.

Regards,

Ian.