Re: Is anyone else seeing SMURF ?

["Logan Rogers-Follis - TNTNetworx.net" <logan () tntnetworx net>]

Sean,
   I see about 50+ of these a day if I leave my PC on all the 
time....of course they are alwasy stopped by my firewall, but there 
still annoying because they fill up my logs.  I see them from all 
different IP's even though I just recently moved myself into a new Class 
C netblock (no one else is in it except a Cisco Router).  So I would 
also be interested to know if anyone knows why, just cause it annoying 
:-P  Though I have never bother to check there IP's for location (I know 
a good chunk of the NEtblocks licensed to my region, so I'll see what I 
find.
   Are these different IP's in the same Class B as you?

Logan

SVater () oh hra com wrote:

> Over the last month, I increasing numbers of Smurf trying to come in on my
> home firewall, all on Port 0.  From what I have seen & read, this is a
> pretty old vulnerability that has been patched. Is this a new hole? I went
> from seeing one in a month to 40 (different IPs) just this weekend over a
> 72 hr period. All coming from my local area (guessing just on the info that
> I pull from GeoBytes.com).
>
> Anyone else seeing this ?
>
> Sean
>
>
> "Eagles may soar but weasels don't get sucked into jet engines." Steven
> Wright
>
>
>
>
> **********************************************************************
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote also confirms that this email message has been swept by
> MIMEsweeper for the presence of computer viruses.
> **********************************************************************
>
>
> ---------------------------------------------------------------------------
> Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
> October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
> technical IT security event.  Modeled after the famous Black Hat event in 
> Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
> Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
> ----------------------------------------------------------------------------
>
>
>
> .
>
>  


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------