Incidents 02-18-02 10:21am

Unusual System Events
=-=-=-=-=-=-=-=-=-=-=

Feb 18 10:21:01 greatwall snort: [1:0:0] UDP to range 1026-60999 {UDP}
 139.92.138.146:1133+-> 12.82.142.34:6767

Feb 18 10:21:01 greatwall kernel: Packet log: input DENY ppp0 PROTO=17
 139.92.138.146:1133+12.82.142.34:6767 L=32 S=0x00 I=64417 F=0x0000 T=112 (#76)

[No p0f 'cause it's udp..]


139.92.138.146
slip139-92-138-146.mos.ru.prserv.net


BW whois 2.9 by Bill Weinman (http://whois.bw.org/)
© 1999-2001 William E. Weinman 

IBM Netherlands N.V. (NET-IBMNETHERLANDS)
   Watsonweg 2
   1423 ND Uithoorn
   NL    

Netname: IBMNETHERLANDS
   Netblock: 139.92.0.0 - 139.92.255.255    

Coordinator:
      EUIBMNIC  (EUI-ORG-ARIN)  euibmnic@NL.IBM.COM
      +49 79 322 8053    

Domain System inverse mapping provided by: 
   NS.UK.PRSERV.NET152.158.16.48
   NS.DE.PRSERV.NET152.158.2.48
   NS.NL.PRSERV.NET152.158.36.48

bmc-perf-agent  6767/tcp        #BMC PERFORM AGENT
bmc-perf-agent  6767/udp        #BMC PERFORM AGENT

No idea what that is...