PDA

View Full Version : Network attack!!! ???

The_real_dj
10-10-2003, 13:08
On my router i keep geting messages saying:

Network Attack Notification.

From 10.22.144.1 to 255.255.255.255 : 360 packts.

------------------------------

In my log it says that this is a ip spoof attack, (i have no 10.xxx.xxx.xxx pcs on the network)
Is it normal to get 30 or 40 of these a day??? I know there is nothing to worry about because the router is blocking them but still worrying!!!

Any comments?? :D :D

Cheers!
Richard M
10-10-2003, 13:10
Wouldn't 10.x.x.x be your cable modem?
Or, doesn't your CM have an IP of 192.168.100.1 with your own PC having 10.x.x.x?
:confused:
Dooby
10-10-2003, 14:05
the destination is 255.255.255.255 which is a broadcast, i.e. it gets sent to everything. the 10.22.144.1 address could have been spoofed so it could be from anywhere

my router 'sees' an alarming amount of garbage packets ( which it blocks ), some seems to be the 'broadcast' netbios stuff windows sends out when it is turned on etc and most seems to be from other ntl users
Ignition
10-10-2003, 23:06
ARP traffic, and/or DHCP broadcasts, perfectly normal part of cable network operation. :)
The_real_dj
11-10-2003, 17:07
Glad it isnt just me then!!

Cheers for the replys!

DJ
BBKing
12-10-2003, 16:01
That's a broadcast from your local UBR's cable card primary IP address to the entire subnet. Not malicious at all, this is why Robin Walker recommends trusting this address (only one per card).
The_real_dj
12-10-2003, 19:46
cheers bbking!!! nice to know its nothin to worry about!!!!