Home page logo
/

nanog logo nanog mailing list archives

Re: [nsp] known networks for broadcast ping attacks
From: Systems Engineer <snash () lightning net>
Date: Wed, 30 Jul 1997 16:21:46 -0400

Actually people are making it seem that the entire MAE is sending you an
echo.  No one is mounting an attack from there,  they are just making it
look like it is coming from there.


Alex.Bligh wrote:

      Here's a list of KNOWN NETWORKS that are being used to ping
flood other networks.  If one of your networks is in here, FILTER
BROADCAST PINGS NOW FROM ENTERING YOUR NETWORK.  YOUR NETWORK IS
BEING
USED TO ATTACK OTHER NETWORKS.

      "204.71.177.255", "255.255.255.255", "207.137.200.255",
"192.41.177.255",

Urm, 192.41.177.255 is the MAE-East LAN ?! Are you saying attacks are
being mounted from here or people are attacking this LAN (not
sure which is more worrying)

Alex Bligh
Xara Networks



--
---     ---     ---     ---     ---     ---     ---     ---     ---
Steven Nash                             ph:  (516)248-8400ext25
Systems Engineer / Network Security    fax:  (516)248-8897
Lightning Internet Services LLC      email:  snash () lightning net
http://www.lightning.net
---     ---     ---     ---     ---     ---     ---     ---     ---





  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault