Welcome! Log In Create A New Profile

Advanced

seeing a source that is not in my network range

Posted by Anonymous User 
Anonymous User
seeing a source that is not in my network range
April 27, 2012 07:45PM
Getting some weird UDP blocks.
Source is sometimes from my local PC (running Pcool smiley and sometimes from an IP which IS NOT in my local net range
they all are going to Berbee Information Systems 64.73.32.135:123. It seems its a nameserver, which on its face is harmless, but im curious why my PC is picking up the following two SOURCE addresses:
192.168.192.1, as well 192.168.152.1

Trojan on the machine spoofing addresses?
Re: seeing a source that is not in my network range
April 27, 2012 11:40PM
avatar
Well that's range got a new owner that's CDW Technologies Inc , that's not harmful from what we knew ,
instead if that ip coming from them is trying to spoof addresses then we have to look further .

Thank you for your report .
fxm
Re: seeing a source that is not in my network range
April 28, 2012 07:44PM
itcsburnett Wrote:
-------------------------------------------------------
> Getting some weird UDP blocks.
> 64.73.32.135:123.

The harmless interpretation of UDP port 123 is timesync traffic.

Determining whether you have malware trying to blend in with that activity will take some research on your part.
Sorry, only registered users may post in this forum.

Click here to login