[Dshield] These kind of attcks from 127.0.0.1 seems to be aREALATTCK

Rick Klinge rick at jaray.net
Fri Feb 20 18:58:28 GMT 2004


Here is a small snip from one of our cisco routers.  Some countries are
blocked.

! bogons (bogus outside networks) and revocations
access-list 101 deny ip 0.0.0.0 1.255.255.255 any log
access-list 101 deny ip 2.0.0.0 0.255.255.255 any log
access-list 101 deny ip 5.0.0.0 0.255.255.255 any log
access-list 101 deny ip 10.0.0.0 0.255.255.255 any log 
access-list 101 deny ip 23.0.0.0 0.255.255.255 any log
access-list 101 deny ip 27.0.0.0 0.255.255.255 any log
access-list 101 deny ip 31.0.0.0 0.255.255.255 any log
access-list 101 deny ip 36.0.0.0 1.255.255.255 any log
access-list 101 deny ip 39.0.0.0 0.255.255.255 any log
access-list 101 deny ip 60.0.0.0 0.255.255.255 any log		
access-list 101 deny ip 61.0.0.0 0.255.255.255 any log		
access-list 101 deny ip 62.167.0.0 0.0.255.255 any log		
access-list 101 deny ip 64.60.0.0 0.0.255.255 any log		
access-list 101 deny ip 72.0.0.0 7.255.255.255 any log
access-list 101 deny ip 83.0.0.0 0.255.255.255 any log
access-list 101 deny ip 84.0.0.0 3.255.255.255 any log
access-list 101 deny ip 88.0.0.0 7.255.255.255 any log
access-list 101 deny ip 96.0.0.0 31.255.255.255 any log
access-list 101 deny ip 127.0.0.0 0.255.255.255 any log
access-list 101 deny ip 169.254.0.0 0.0.255.255 any log
access-list 101 deny ip 172.16.0.0 0.15.255.255 any log
access-list 101 deny ip 173.0.0.0 0.255.255.255 any log
access-list 101 deny ip 174.0.0.0 1.255.255.255 any log
access-list 101 deny ip 176.0.0.0 7.255.255.255 any log
access-list 101 deny ip 184.0.0.0 3.255.255.255 any log
access-list 101 deny ip 189.0.0.0 0.255.255.255 any log
access-list 101 deny ip 190.0.0.0 0.255.255.255 any log
access-list 101 deny ip 197.0.0.0 0.255.255.255 any log
access-list 101 deny ip 198.18.0.0 0.1.255.255 any log
access-list 101 deny ip 200.0.0.0 0.255.255.255 any log		
access-list 101 deny ip 201.0.0.0 0.255.255.255 any log		
access-list 101 deny ip 211.0.0.0 0.255.255.255 any log
access-list 101 deny ip 218.56.0.0 0.0.255.255 any log
access-list 101 deny ip 218.57.0.0 0.0.255.255 any log		
access-list 101 deny ip 219.0.0.0 0.255.255.255 any log		
access-list 101 deny ip 222.0.0.0 1.255.255.255 any log
access-list 101 deny ip 224.0.0.0 31.255.255.255 any log
access-list 101 deny ip 255.0.0.0 0.255.255.255 any log

~Rick


> -----Original Message-----
> From: list-bounces at dshield.org 
> [mailto:list-bounces at dshield.org] On Behalf Of Coyle, Brian
> Sent: Friday, February 20, 2004 9:36 AM
> To: General DShield Discussion List
> Subject: RE: [Dshield] These kind of attcks from 127.0.0.1 
> seems to be aREALATTCK
> 
> 
> On Fri 02/20/2004 07:32, Ruigrok, Jeroen 
> [jeroen_ruigrok at epson-europe.com] wrote:
> 
> > I so wish people would just follow the Manning draft
> > (or whatever it is called today) 
> 
http://www.ietf.org/rfc/rfc3330.txt

                                    -- Brian, GCIA

___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.




More information about the list mailing list