Windows Server 2003
1825719 Members
2853 Online
109686 Solutions
New Discussion

Re: windows ip spoofing

 
SAN_8
Frequent Advisor

windows ip spoofing

In our windows servers contineously ip spoofing is there. the firewall is droping and creating the long. how we can stop this. pls find the log

Number Date Time Type Action Service Source Port Source Destination Protocol User Information
127838 17-Jan-10 0:22:18 Log Drop 1282 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127840 17-Jan-10 0:22:18 Log Drop 1286 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127843 17-Jan-10 0:22:18 Log Drop 1290 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127850 17-Jan-10 0:22:18 Log Drop 1294 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127853 17-Jan-10 0:22:19 Log Drop 1298 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127855 17-Jan-10 0:22:19 Log Drop 1302 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127861 17-Jan-10 0:22:19 Log Drop 1306 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127867 17-Jan-10 0:22:19 Log Drop 1310 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127869 17-Jan-10 0:22:19 Log Drop 1314 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127904 17-Jan-10 0:22:19 Log Drop 1318 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127909 17-Jan-10 0:22:19 Log Drop 1322 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127912 17-Jan-10 0:22:19 Log Drop 1326 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127919 17-Jan-10 0:22:19 Log Drop 1330 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127921 17-Jan-10 0:22:19 Log Drop 1334 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127926 17-Jan-10 0:22:20 Log Drop 1338 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127934 17-Jan-10 0:22:20 Log Drop 1342 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127942 17-Jan-10 0:22:20 Log Drop 1346 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127947 17-Jan-10 0:22:20 Log Drop 1350 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127952 17-Jan-10 0:22:20 Log Drop 1354 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127953 17-Jan-10 0:22:20 Log Drop 1358 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127957 17-Jan-10 0:22:20 Log Drop 1362 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127960 17-Jan-10 0:22:20 Log Drop 1366 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127964 17-Jan-10 0:22:20 Log Drop 1370 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127967 17-Jan-10 0:22:20 Log Drop 1374 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127973 17-Jan-10 0:22:21 Log Drop 1378 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127976 17-Jan-10 0:22:21 Log Drop 1382 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127984 17-Jan-10 0:22:21 Log Drop 1386 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127990 17-Jan-10 0:22:21 Log Drop 1390 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127995 17-Jan-10 0:22:21 Log Drop 1394 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
127999 17-Jan-10 0:22:21 Log Drop 1398 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
128033 17-Jan-10 0:22:21 Log Drop 1402 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
128037 17-Jan-10 0:22:21 Log Drop 1406 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
128038 17-Jan-10 0:22:21 Log Drop 1410 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
128044 17-Jan-10 0:22:21 Log Drop IBMMQListener nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
128050 17-Jan-10 0:22:22 Log Drop 1418 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
128054 17-Jan-10 0:22:22 Log Drop TCP-1422 nbsession 10.12.21.35 169.254.161.18 tcp message_info: Address spoofing
3 REPLIES 3
Dennis Handly
Acclaimed Contributor

Re: windows ip spoofing

What version of windows to you have? What model servers?
SAN_8
Frequent Advisor

Re: windows ip spoofing

windows 2003 entr. server dl380 g5
SAN_8
Frequent Advisor

Re: windows ip spoofing

any help for this