3 ms·
Reverse address lookup servers routinely see escaped attempts to resolve ULA and rfc1918. If you can tie the resolver to other valid data, you know inside state
by ggm 9mo ago
Reverse address lookup servers routinely see escaped attempts to resolve ULA and rfc1918. If you can tie the resolver to other valid data, you know inside state.
Public services see one way (no TCP return flow possible) from almost any source IP. If you can tie that from other corroborated data, the same: you see packets from "inside" all the time.
Darknet collection during final /8 run-down captured audio in UDP.
Firewalls? ACLs? Pah. Humbug.
- _gmax1 9mo ago"Darknet collection during final /8 run-down captured audio in UDP." Mind elaborating on this? SIP traffic from which year?
- LtdJorge 9mo agoRTP I’d say
- ggm 9mo ago2010/2011 time frame. Google and others helped sink the traffic, all written up at apnic labs. It's how 1.1.1.0/24 got held back from general release.
- advisedwang 9mo agoe.g. https://www.potaroo.net/studies/103-slash8/103-slash8.pdf https://www.potaroo.net/studies/103-slash8/103-slash8.pdf and https://conference.apnic.net/news-archives/2010/network-1/assets/Traffic-in-Network-1.pdf https://conference.apnic.net/news-archives/2010/network-1/as...