cancel
Showing results for 
Search instead for 
Did you mean: 

Does anybody else see **SMURF** scans

N/A

Does anybody else see **SMURF** scans

Since I installed my Belkin router I see virtually nothing of interest in the logs in fact the only thing I see is every few days a line similar to -
04/20/2004 19:31:47 **Smurf** 217.5.55.0, 2792->> 212.159.20.XXX, 1026 (from ATM1 Inbound)

Apparently port 1026 is often used to spam MSN messenger with pop-up ads.

I came across http:// www. netscan. org/ (link deliberately broken) which seems to be a site listing among other things, insecure networks. Am I misinterpreting this ?
6 REPLIES
N/A

Does anybody else see **SMURF** scans

The data at netscan.org appears to be a little out of date. Checking my IP gave results for 2002 :lol:
N/A

Does anybody else see **SMURF** scans

.... once I was insecure. Now I'm not, but I still worry about it.
Community Veteran
Posts: 14,469
Registered: 30-07-2007

Does anybody else see **SMURF** scans

I'm not sure Belkin understand what a smurf attack actually is. It normally involves ICMP or UDP spoofed packets so not sure how port 1026 comes into this.

For more info on Smurfing see http://www.pentics.net/denial-of-service/white-papers/smurf.cgi
N/A

Does anybody else see **SMURF** scans

UDP still uses a port based target.
N/A

Does anybody else see **SMURF** scans

Peter - thanks for the link. I've been seeing **SMURF** for some time and had no idea what it was.

Doesn't the ", 1026" at the end of the ip indicate the destination port?
Community Veteran
Posts: 14,469
Registered: 30-07-2007

Does anybody else see **SMURF** scans

Quote
UDP still uses a port based target.


Yes of couse it does - silly me.

Quote
Doesn't the ", 1026" at the end of the ip indicate the destination port?


Yes it does.