Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Very weird moment...
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Plusnet Community
- :
- Forum
- :
- Help with my Plusnet services
- :
- Broadband
- :
- Very weird moment...
Very weird moment...
20-03-2014 2:19 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
...updating my security stuff, network siezed up and got weird error. (Didn't get time to read, it disappeard quickly.)
Then suddenly activity at a speed I've never seen the likes of. Didn't know my connection could ever go that fast.
Then stopped.
Checked the destination IP -
NetRange: 198.18.0.0 - 198.19.255.255
CIDR: 198.18.0.0/15
OriginAS:
NetName: SPECIAL-IPV4-BENCHMARK-TESTING-IANA-RESERVED
NetHandle: NET-198-18-0-0-1
Parent: NET-198-0-0-0-0
NetType: IANA Special Use
Comment: Addresses starting with "198.18." or "198.19." are set aside for use in
isolated laboratory networks used for benchmarking and performance testing. They should never
appear on the Internet and if you see Internet traffic using these addresses, they are being
used without permission.
Comment:
Comment: This assignment was made by the IETF, the organization that develops Internet
protocols, in RFC 2544, which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc2544
[my italics]
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone: +1-310-301-5820
OrgTechEmail: abuse@iana.org
Advice anyone?
Then suddenly activity at a speed I've never seen the likes of. Didn't know my connection could ever go that fast.
Then stopped.
Checked the destination IP -
NetRange: 198.18.0.0 - 198.19.255.255
CIDR: 198.18.0.0/15
OriginAS:
NetName: SPECIAL-IPV4-BENCHMARK-TESTING-IANA-RESERVED
NetHandle: NET-198-18-0-0-1
Parent: NET-198-0-0-0-0
NetType: IANA Special Use
Comment: Addresses starting with "198.18." or "198.19." are set aside for use in
isolated laboratory networks used for benchmarking and performance testing. They should never
appear on the Internet and if you see Internet traffic using these addresses, they are being
used without permission.
Comment:
Comment: This assignment was made by the IETF, the organization that develops Internet
protocols, in RFC 2544, which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc2544
[my italics]
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone: +1-310-301-5820
OrgTechEmail: abuse@iana.org
Advice anyone?
Message 1 of 6
(1,099 Views)
5 REPLIES 5
Re: Very weird moment...
20-03-2014 7:01 AM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
IP addresses in that 198.18. range are returned by the DNS forwarder in technicolor routers for "WANDownSpoofing" (which is supposed to be when the Internet connection is down).
Message 2 of 6
(668 Views)
Re: Very weird moment...
20-03-2014 3:23 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
Can you explain what "WANDownSpoofing" is?
The IANA page says that this IP
"should never appear on the Internet and
if you see Internet traffic using these
addresses, they are being used without
permission".
The IANA page says that this IP
"should never appear on the Internet and
if you see Internet traffic using these
addresses, they are being used without
permission".
Message 3 of 6
(668 Views)
Re: Very weird moment...
20-03-2014 4:56 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
This search suggests that the "WANDownSpoofing" is known on the Technicolor routers worldwide
Message 4 of 6
(668 Views)
Re: Very weird moment...
20-03-2014 5:12 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
There was also this thread on here which I didn't see earlier -
https://community.plus.net/forum/index.php/topic,116173.0.html
Do have wireshark but wasn't runnng at the time.
https://community.plus.net/forum/index.php/topic,116173.0.html
Do have wireshark but wasn't runnng at the time.
Message 5 of 6
(668 Views)
Re: Very weird moment...
20-03-2014 5:24 PM
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Report to Moderator
That is the 2nd down from the top in the link I gave earlier, which was my main prompt for posting said link
Message 6 of 6
(668 Views)
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page