Network attack!!! ???
 

On my router i keep geting messages saying:

Network Attack Notification.

From 10.22.144.1 to 255.255.255.255 : 360 packts.

------------------------------

In my log it says that this is a ip spoof attack, (i have no 10.xxx.xxx.xxx pcs on the network)
Is it normal to get 30 or 40 of these a day??? I know there is nothing to worry about because the router is blocking them but still worrying!!!

Any comments?? :D :D

Cheers!

Re: Network attack!!! ???
 

Wouldn't 10.x.x.x be your cable modem?
Or, doesn't your CM have an IP of 192.168.100.1 with your own PC having 10.x.x.x?
:confused:

Re: Network attack!!! ???
 

the destination is 255.255.255.255 which is a broadcast, i.e. it gets sent to everything. the 10.22.144.1 address could have been spoofed so it could be from anywhere

my router 'sees' an alarming amount of garbage packets ( which it blocks ), some seems to be the 'broadcast' netbios stuff windows sends out when it is turned on etc and most seems to be from other ntl users

Re: Network attack!!! ???
 

ARP traffic, and/or DHCP broadcasts, perfectly normal part of cable network operation. :)

Re: Network attack!!! ???
 

Glad it isnt just me then!!

Cheers for the replys!

DJ

Re: Network attack!!! ???
 

That's a broadcast from your local UBR's cable card primary IP address to the entire subnet. Not malicious at all, this is why Robin Walker recommends trusting this address (only one per card).

Re: Network attack!!! ???
 

cheers bbking!!! nice to know its nothin to worry about!!!!