Elektrine lite

← Feed

@jtk@infosec.exchange

Post #4043781

2026-07-23 18:58 UTC

@benjojo@benjojo.co.uk Somewhere there must have been a well-known list with the incorrect /15 a bunch of us copied from. I would have guessed it might have been something we messed up at Cymru, but I can't find an old bogon list to confirm and archive.org seems to returning a lot of 503s today. Older versions of nmap (at least as early as 2013) had the incorrect prefix so this mistake probably was and remains widely deployed. I fixed my old repo and archived just in case. Nice find!

Replies (1)

  • @jtk@infosec.exchange 2026-07-24 00:31

    @benjojo@benjojo.co.uk Found it. The Team Cymru bogon list did have the 192.18.0.0/15 prefix listed up until about 2011 when the error was identified and subsequently fixed. 15 years later it persists!

    Open ##4050069