nanog mailing list archives
for folks tracking DDOS sources or reading the GRC attack log
From: RJ Atkinson <rja () inet org>
Date: Sat, 23 Jun 2001 22:18:10 -0400
24.0/8 is the "cable block". ARIN normally allocates residential cable modem subnets out of this space. Nearly all the cable operators have one slice or another from this block. Nearly all North American cable modems users have address space in this block. Cable modems themselves are nearly always numbered in 10.0/8. For those who have read the GRC web site, note that 216.216.8.x appears not to be a cable modem slice in any event. ARIN reports that this slice has been allocated to @Work, which is the commercial IP lease-line business unit within Excite@Home. Presence of a *.home.net DNS entry does not mean the system is on any cable modem network. There are no 24.0/8 addresses listed in the log at http://grc.com/dos/attacklog.htm so it isn't clear to me that any cable modems were used in that particular attack. Ran rja () inet org
Current thread:
- for folks tracking DDOS sources or reading the GRC attack log RJ Atkinson (Jun 23)
- Re: for folks tracking DDOS sources or reading the GRC attack log Jonathan Disher (Jun 24)
- Re: for folks tracking DDOS sources or reading the GRC attack log RJ Atkinson (Jun 25)
- Re: for folks tracking DDOS sources or reading the GRC attack log Daniel Karrenberg (Jun 25)
- Re: for folks tracking DDOS sources or reading the GRC attack log RJ Atkinson (Jun 25)
- Re: for folks tracking DDOS sources or reading the GRC attack log Fletcher E Kittredge (Jun 24)
- Re: address allocations RJ Atkinson (Jun 25)
- RE: for folks tracking DDOS sources or reading the GRC attack log Mike Batchelor (Jun 25)
- <Possible follow-ups>
- Re: for folks tracking DDOS sources or reading the GRC attack log Richard A. Steenbergen (Jun 23)
- RE: for folks tracking DDOS sources or reading the GRC attack log Richard A. Steenbergen (Jun 25)
- RE: for folks tracking DDOS sources or reading the GRC attack log Greg A. Woods (Jun 25)
- RE: for folks tracking DDOS sources or reading the GRC attack log Bruce Campbell (Jun 25)
(Thread continues...)
- Re: for folks tracking DDOS sources or reading the GRC attack log Jonathan Disher (Jun 24)