Nettloggen

[branch]

Jeg har en 3Com gateway som deler internett her. Jeg har merket at det dukker stadig opp noen linjer i loggen som jeg ikke helt skjønner. For det første er 10.0.0.138 en IP som ingen på nettverket har. Den kan ikke pinges heller. Dernest er 239.255.255.250 en ugyldig internett IP virker det som: "No whois server is known for this kind of object." når jeg tar whois IP i linux.

 

2004/05/12 13:04:44 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7624 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:44 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7624 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:44 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7625 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:44 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7625 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7626 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7626 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7627 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7627 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7628 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7628 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7629 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7629 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7630 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:45 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7630 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:46 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7631 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:46 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7631 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:46 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7632 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:46 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7632 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:46 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7633 Dest IP:239.255.255.250 Port:1900

2004/05/12 13:04:46 : **IP Spoofing** <IP> Source IP:10.0.0.138 Port:7633 Dest IP:239.255.255.250 Port:1900

 

Noen som vet hva dette er?