Security Incidents mailing list archives

Is this something important?


From: ramon () CIMAT MX (Ram'on Reyes Carri'on)
Date: Wed, 3 May 2000 03:11:11 -0500


Thank's for having a look at this.

I am getting the following in my router's log and don't understand much of
what it means, but the src and dst=131.107.2.255 (deleted) IP addresses
are outside of my network.

Is it spoofing, misconfiguration or something else?

The first line appears before each of the others, the last few lines look
a bit odd:

(Sorry for the length, I wasn't sure what to delete! I did prot=17 and
I have  sport=dport)

%IP-3-LOOPPAK: Looping packet detected and dropped -
May  2 08:32:11 gw 206450: src=131.107.2.200, tl=221, sport=138
May  2 08:37:09 gw 206465: src=131.107.2.200, tl=221, sport=138
May  2 08:39:21 gw 206469: src=131.107.2.200, tl=78, sport=137
May  2 08:52:21 gw 206495: src=131.107.2.200, tl=221, sport=138
May  2 09:04:07 gw 206533: src=131.107.2.200, tl=78, sport=137
May  2 09:05:09 gw 206537: src=131.107.2.200, tl=78, sport=137
May  2 09:07:21 gw 206545: src=131.107.2.5, tl=78, sport=137
May  2 09:21:39 gw 206599: src=131.107.2.200, tl=78, sport=137
May  2 09:31:38 gw 206632: src=131.107.2.15, tl=78, sport=137
May  2 09:34:04 gw 206640: src=131.107.2.200, tl=78, sport=137
May  2 09:49:20 gw 206697: src=131.107.2.200, tl=78, sport=137
May  2 09:54:27 gw 206717: src=131.107.2.30, tl=208, sport=138
May  2 10:01:08 gw 206742: src=131.107.2.6, tl=78, sport=137
May  2 10:02:19 gw 206746: src=131.107.2.15, tl=78, sport=137
May  2 10:03:26 gw 206750: src=131.107.2.4, tl=78, sport=137
May  2 10:04:34 gw 206754: src=131.107.2.200, tl=78, sport=137
May  2 10:07:18 gw 206762: src=131.107.2.20, tl=78, sport=137
May  2 10:15:40 gw 206787: src=131.107.2.22, tl=78, sport=137
May  2 10:18:34 gw 206795: src=131.107.2.200, tl=78, sport=137
May  2 10:19:49 gw 206799: src=131.107.2.200, tl=78, sport=137
May  2 10:31:45 gw 206831: src=131.107.2.6, tl=78, sport=137
May  2 10:32:56 gw 206835: src=131.107.2.15, tl=78, sport=137
May  2 10:34:03 gw 206839: src=131.107.2.4, tl=78, sport=137
May  2 10:48:39 gw 206883: src=131.107.2.16, tl=78, sport=137
May  2 11:01:33 gw 206929: src=131.107.2.200, tl=78, sport=137
May  2 11:08:34 gw 206955: src=131.107.2.20, tl=78, sport=137
May  2 11:13:01 gw 206972: src=131.107.2.24, tl=96, sport=137
Apr 24 11:20:35 gw 176774: src=131.107.2.1, tl=216, sport=138
Apr 24 11:26:54 gw 176795: src=131.107.2.5, tl=207, sport=138
Apr 24 11:33:47 gw 176811: src=131.107.2.1, tl=78, sport=137
Apr 24 11:35:49 gw 176819: src=131.107.2.4, tl=78, sport=137
Apr 24 11:39:41 gw 176831: src=131.107.2.5, tl=78, sport=137
Apr 24 11:56:34 gw 176892: src=131.107.2.5, tl=78, sport=137
Apr 24 12:05:52 gw 176921: src=131.107.2.1, tl=78, sport=137
Apr 24 12:11:45 gw 176941: src=131.107.2.5, tl=78, sport=137
Apr 24 12:37:03 gw 177029: src=131.107.2.4, tl=78, sport=137
Apr 24 12:42:23 gw 177049: src=131.107.2.5, tl=78, sport=137
Apr 24 12:51:37 gw 177081: src=131.107.2.1, tl=78, sport=137
Apr 24 13:06:53 gw 177125: src=131.107.2.1, tl=262, sport=138
Apr 24 13:49:16 gw 177273: src=131.107.2.1, tl=262, sport=138
Apr 24 14:07:32 gw 177336: src=131.107.2.5, tl=78, sport=137
Apr 24 14:08:33 gw 177340: src=131.107.2.32, tl=78, sport=137
Apr 24 14:44:50 gw 177469: src=131.107.2.6, tl=262, sport=138
Apr 24 14:53:41 gw 177494: src=131.107.2.1, tl=78, sport=137
Apr 24 14:54:46 gw 177498: src=131.107.2.4, tl=78, sport=137
Apr 24 14:59:35 gw 177514: src=131.107.2.5, tl=78, sport=137
Apr 24 15:03:08 gw 177527: src=131.107.2.1, tl=78, sport=137
Apr 24 15:09:46 gw 177547: src=131.107.2.32, tl=78, sport=137
Apr 24 15:21:22 gw 177591: src=131.107.2.5, tl=78, sport=137
Apr 24 15:25:27 gw 177607: src=131.107.2.4, tl=78, sport=137
Apr 24 15:27:44 gw 177617: src=131.107.2.1, tl=78, sport=137
Apr 24 15:30:07 gw 177625: src=131.107.2.5, tl=78, sport=137
Apr 24 15:33:38 gw 177637: src=131.107.2.5, tl=78, sport=137
Apr 24 15:54:51 gw 177708: src=131.107.2.1, tl=78, sport=137
Apr 24 15:56:04 gw 177712: src=131.107.2.4, tl=78, sport=137
Apr 24 16:00:40 gw 177728: src=131.107.2.5, tl=262, sport=138
Apr 24 16:10:30 gw 177767: src=131.107.2.5, tl=78, sport=137
Apr 24 16:13:40 gw 177779: src=131.107.2.2, tl=78, sport=137
Apr 27 10:59:05 gw 188726: src=131.107.2.200, tl=78, sport=137
Apr 27 11:06:19 gw 188751: src=131.107.2.11, tl=229, sport=138
Apr 27 11:07:19 gw 188755: src=131.107.2.23, tl=78, sport=137
Apr 27 11:23:21 gw 188822: src=131.107.2.23, tl=217, sport=138
Apr 27 11:25:51 gw 188833: src=131.107.2.4, tl=207, sport=138
Apr 27 11:26:55 gw 188837: src=131.107.2.11, tl=96, sport=137
Apr 27 11:29:10 gw 188846: src=131.107.2.4, tl=229, sport=138
Apr 27 11:30:43 gw 188851: src=131.107.2.32, tl=217, sport=138
Apr 27 11:31:43 gw 188855: src=131.107.2.30, tl=208, sport=138
Apr 27 11:33:57 gw 188865: src=131.107.2.15, tl=217, sport=138
Apr 27 11:35:50 gw 188870: src=131.107.2.200, tl=78, sport=137
Apr 27 11:36:50 gw 188876: src=131.107.2.30, tl=202, sport=138
Apr 27 11:42:56 gw 188896: src=131.107.2.6, tl=229, sport=138
Apr 27 11:44:00 gw 188901: src=131.107.2.16, tl=217, sport=138
Apr 27 11:45:11 gw 188906: src=131.107.2.40, tl=217, sport=138
Apr 27 11:47:14 gw 188916: src=131.107.2.19, tl=229, sport=138
Apr 27 11:50:40 gw 188933: src=131.107.2.19, tl=217, sport=138
Apr 27 11:53:45 gw 188947: src=131.107.2.40, tl=217, sport=138
Apr 27 11:56:47 gw 188961: src=131.107.2.17, tl=217, sport=138
Apr 27 11:58:53 gw 188970: src=131.107.2.16, tl=217, sport=138
Apr 27 12:01:06 gw 188980: src=131.107.2.17, tl=217, sport=138
Apr 27 12:02:07 gw 188987: src=131.107.2.20, tl=229, sport=138
Apr 27 12:05:24 gw 189002: src=131.107.2.200, tl=96, sport=137
Apr 28 02:16:09 gw 192015: src=131.107.2.6, tl=216, sport=138
Apr 28 12:39:17 gw 194376: src=131.107.2.200, tl=212, sport=138
Apr 28 13:28:39 gw 194588: src=131.107.2.200, tl=78, sport=137
Apr 28 13:39:28 gw 194637: src=131.107.2.200, tl=78, sport=137
Apr 28 14:05:24 gw 194743: src=131.107.2.200, tl=78, sport=137
Apr 28 14:17:44 gw 194803: src=131.107.2.200, tl=78, sport=137
Apr 28 14:31:34 gw 194861: src=131.107.2.200, tl=96, sport=137

Apr 10 14:46:03 gw 118354: src=169.254.49.13, dst=169.254.255.255, tl=205, sport=138
Apr 11 16:34:14 gw 123691: src=169.254.162.208, dst=169.254.255.255, tl=207, sport=138
Apr 13 09:46:22 gw 134007: src=169.254.243.80, dst=169.254.255.255, tl=96, sport=137
Apr  6 17:57:37 gw 96578: src=192.168.1.16, dst=209.50.251.51, tl=63, sport=1069
Apr  6 18:01:39 gw 96595: src=192.168.1.16, dst=209.50.251.49, tl=63, sport=1303
Apr  7 16:30:12 gw 101996: src=169.254.60.247, dst=169.254.255.255, tl=96, sport=137
Apr  7 16:53:51 gw 102120: src=169.254.141.228, dst=169.254.255.255, tl=96, sport=137


Current thread: