Smurf attack from AS1717

Henry R. Linneweh linneweh at concentric.net
Sun May 16 19:15:17 UTC 1999


the attack was without warrant.
and started:
11:42:53 AM: Dial-Up Adapter [0000][Ref# 2] Blocking incoming ICMP:
src=193.51.125.253, dst=206.173.231.208, type 0.
and ended at:
11:43:10 AM: Dial-Up Adapter [0000][Ref# 2] Blocking incoming ICMP:
src=193.49.21.7, dst=206.173.231.208, type 0.

generating 9486 lines from AS1717



inetnum:     193.51.125.0
netname:     FR-SHSNET6
descr:       LISH - CNRS
descr:       Laboratoire d'Informatique pour les Sciences de l'Homme
descr:       54 Boulevard Raspail, F-75006 PARIS, France
country:     FR
admin-c:     Jean-Louis Leonhardt
tech-c:      Philippe Leca
remarks:     RERIF
changed:     rensvp at urec.fr 940928
source:      RIPE
Your probe of 193.49.21.7/24 yielded the following results:

Network: 193.49.21.0, Netmask: 255.255.255.0, Broadcast: 193.49.21.255,
Responded: Yes
(broadcast=4, network=0), Duplicates: 3

CONCLUSION: This network is a potential smurf
amplifier.

id:            1025582
created:       1998-10-23 17:13:24 CET
updated:       1999-05-16 21:01:34 CET
network:       193.49.21.0/24
net-descr:     not-analyzed

last-probed:   1999-05-16 21:17:04 CET
responding:    Yes
duplicates:    3 (highest seen, resets to 0 when 0 seen)
fixed:         never

home-as:       1717
as-descr:      not-analyzed

======================================

Your probe of 193.51.125.253/24 yielded the following results:

Network: 193.51.125.0, Netmask: 255.255.255.0, Broadcast:
193.51.125.255, Responded: Yes
(broadcast=44, network=0), Duplicates: 43

CONCLUSION: This network is a potential SEVERE
smurf amplifier.

id:            1025926
created:       1998-10-23 19:55:46 CET
updated:       1999-03-19 13:06:37 CET
network:       193.51.125.0/24
net-descr:     not-analyzed

last-probed:   1999-05-16 21:18:19 CET
responding:    Yes
duplicates:    45 (highest seen, resets to 0 when 0 seen)
fixed:         never

home-as:       1717
as-descr:      not-analyzed








More information about the NANOG mailing list