UDP port 137 packets sent to 70.255.224.194

[Felipe Alfaro <felipe_alfaro () EMAIL COM>]

Hello,

I have configured our Cisco 801 router to block all 
incoming/outgoing NetBIOS traffic (TCP/UPD ports 137-139). 
I have set an specific filter for this and I have enabled 
logging.

Today, I have been looking at the logs and I see several 
UDP packets (port 137) caught by the router which were 
targeted at 70.255.224.194 host. I have been searching 
WhoIs from NetworkSolutions and Arin but I have been unable 
to identify the target. Of course, this is an unexpected 
target of NetBIOS traffic from within our network.

I am a little new to intrussion detection, trojan horses 
and security, so I would like some advice referring to this 
issue.

Please, feel free to contact me here or, preferably, by e-
amil at the following address: falfaro () cofiber es.

Thank you very much,

    Felipe Alfaro