|
|
 | | From: | rnurse at cudbytech.net | | Subject: | IP Spoofing In My IP Range!!! | | Date: | 20 Jan 2005 03:53:12 -0800 |
|
|
 | Hi All,
My firewall appliance (Sonicwall SOHO) is reporting tons of IP Spoofing
in my IP range. I've reported it to my ISP's Abuse department. But,
I'm curious as to if this is a real hacking attempt or just some
glitch.
Thanks.
|
|
| | From: | Stevey | | Subject: | Re: IP Spoofing In My IP Range!!! | | Date: | Thu, 20 Jan 2005 12:09:59 +0000 (UTC) |
|
|
| * On 20 Jan 2005 03:53:12 -0800, rnurse@cudbytech.net wrote:
> Hi All,
>
> My firewall appliance (Sonicwall SOHO) is reporting tons of IP Spoofing
> in my IP range. I've reported it to my ISP's Abuse department. But,
> I'm curious as to if this is a real hacking attempt or just some
> glitch.
You need to give more details than this. The spoofed packets.. what are
the destination addresses of these packets are the spoofed packets
outbound or inbound and what are the port numbers. You have any logs?
Post them using snort or some such tool to change the IP addresses in
the log.
It's quite possible its as misconfigured device, another ISP user on an
adjacent block, or a billion other benign things.
|
|
|
