Attack of the icmp pinging morons.........
    Zscoundrel 
    Zscoundrel at kc.rr.com
       
    Sun Aug 24 19:00:34 CDT 2003
    
    
  
Whew!!!  I am glad to see that my current dhcp address was not listed in 
your list!
Hanasaki JiJi wrote:
> Anyone else getting pinged DOS from
>     "ICMP PING CyberKit 2.2 Windows"
> This is the report from Snort.  There were over 12,000 of them in the 
> last 24hours.  This number has been increasing over the last week.  
> Most of the offending IP's seem to be from RR accounts.  Examples below:
>
> Events from same host to same destination using same method
>  # of  from             to               method
>    26  65.30.112.72     65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    19  65.30.148.72     65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    17  65.30.97.9       65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    15  65.30.193.88     65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.30.205.204    65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.29.6.220      65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.30.146.224    65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.30.140.219    65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.29.219.81     65.30.34.80      ICMP PING CyberKit 2.2 Windows
> ...
>
>
-- 
There are only 10 types of people in the world: 
Those who understand binary, and those who don't
    
    
More information about the Kclug
mailing list