Re: Packet from port 80 with spoofed microsoft.com ip

From: Rich Puhek <rpuhek(at)etnsystems.com>
Date: Thu Jan 30 2003 - 12:20:19 EST

Thiago Conde Figueiró wrote:
> On Wed, 29 Jan 2003 21:46:53 +1100

Very true.

> I'm not saying the packet didn't come from there, as I didn't bother
#whois 207.46.249.190

OrgName: Microsoft Corp
OrgID: MSFT

NetRange: 207.46.0.0 - 207.46.255.255
CIDR: 207.46.0.0/16
NetName: MICROSOFT-GLOBAL-NET
NetHandle: NET-207-46-0-0-1
Parent: NET-207-0-0-0-0
NetType: Direct Assignment
(snip)

That answers that question very quickly.

--Rich

---

Rich Puhek
ETN Systems Inc.
2125 1st Ave East
Hibbing MN 55746

tel: 218.262.1130
email: rpuhek@etnsystems.com

---

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Thu Jan 30 13:22:33 2003