[14288] in North American Network Operators' Group
Re: [nanog] Broadcast pings.
daemon@ATHENA.MIT.EDU (Stephen Balbach)
Mon Dec 22 15:07:47 1997
Date: Mon, 22 Dec 1997 15:00:20 -0500 (EST)
From: Stephen Balbach <stephen@clark.net>
Reply-To: Stephen Balbach <stephen@clark.net>
To: Jamie Scheinblum <jamie@fast.net>
cc: nanog@merit.edu
In-Reply-To: <4DB4BFFE4768D011954E0000C0815AED967A17@fnbdc1.youtools.com>
Yes we see a lot of broadcast pings, one network after the next in
sequential order through CIDR blocks. Fun. Probably 5-10 attacks/day.
On Mon, 22 Dec 1997, Jamie Scheinblum wrote:
> Has anyone seen an increase of broadcast pings, where the source route
> appears to be from a nameserver?
>
> We took a look through our access-list logs, and it seems all of the
> attempted attacks during the last few days have had an IP-source of a
> nameserver.
>
> Just thought it was curious.
>
> Best regards,
>
> Jamie Scheinblum - FASTNET(tm) / You Tools Corporation
> jamie@fast.net (610)954-5200 http://www.fast.net/
> FASTNET - Business and Personal Internet Solutions