smurf pinging router?

Feb 18, 2005 3 Replies
L

I have a SMC router. This is in my status page:



Security Log



View any attempts that have been made to gain access to your network.


2005/02/15 22:34:43 ** Smurf ** 10.10.106.208 ->>
12.214.xxx.xxx


2005/02/15 22:47:22 ** Smurf ** 10.67.147.104 ->>



12.214.xxx.xxx


2005/02/15 22:47:22 ** Smurf ** 10.67.153.66 ->> 12.214.xxx.xxx


2005/02/15 22:47:22 ** Smurf ** 10.68.15.14 ->> 12.214.xxx.xxx


2005/02/15 22:47:33 ** Smurf ** 10.68.71.60 ->> 12.214.xxx.xxx


2005/02/16 00:17:48 10.10.10.4 login successful
2005/02/16 21:48:40 10.10.10.4 login successful


My private addresses are 10.10.10.xxx The 12.214.xxx.xxx is public on the internet.



My boxes are 3 Linspire (Debian Sarge) and 1 Windows 98.



I think the log shows a box on my lan trying to ping the router. Unless it's someone with a misconfigured machine pinging the internet side. But I don't know enough to say.



AVG, Spybot, and Adaware say the Win98 box is clean. Do I really have Smurf on my Win98 box?


Vote
Twitter Facebook LinkedIn
N

No it's not. It's someone on the internet side spoofing the IP address trying to be considered a LAN machine to gain previleged access, that's why it uses a private IP address.

I don't think so!! No one can ping on the internet with a private IP. It's not possible. Forget it!

Vote
Twitter Facebook LinkedIn
R

There are a couple of alternatives I can think of:

If you have RIP advertising on, you could perhaps attract pings from various misconfigured clients in your immediate ISP surroundings.

Another possibility: one ISP (telia/comhem) I subscribed to, had a local

10.x.x.x network for their DNS servers; similar problems occurred if you tried using the same net locally, inside your NAT.

/Rolf

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required