[Dshield] Spoofed attack from IP 127.0.0.1

Coyle, Brian Brian.Coyle at disney.com
Tue Oct 28 15:52:08 GMT 2003


> Dusanka wrote:
> We are under spoofed attack from IP 127.0.0.1 almost every minute.  
> Is there anything I can do?

> PS: Here are few log records:
> 2003-10-28	13:51:45	127.0.0.1	66.28.8.96	Tcp	80
> 1310	RST ACK 	Spoof	66.28.20.42	45 00 00 28 1e 57 00 00 77
> 06 5b fc 7f 00 00 01 42 1c 08 60	00 50 05 1e 00 00 00 00 09 fd 00 01
> 50 14 00 00 d6 e7 00 00
  [snip]

Deb Hale replied:
>> I am seeing the same thing on one of my Internet connections.  I am 
>> trying to figure out what is going on.  If anyone has any ideas, I 
>> would appreciate input.  Deb

See here-


   http://cert.uni-stuttgart.de/archive/intrusions/2003/08/msg00209.html


                                    -- Brian, GCIA




More information about the list mailing list