Attack of the icmp pinging morons.........

Hanasaki JiJi hanasaki at hanaden.com
Sun Aug 24 15:21:14 CDT 2003


Anyone else getting pinged DOS from
	"ICMP PING CyberKit 2.2 Windows"
This is the report from Snort.  There were over 12,000 of them in the 
last 24hours.  This number has been increasing over the last week.  Most 
of the offending IP's seem to be from RR accounts.  Examples below:

Events from same host to same destination using same method
  # of  from             to               method
    26  65.30.112.72     65.30.34.80      ICMP PING CyberKit 2.2 Windows
    19  65.30.148.72     65.30.34.80      ICMP PING CyberKit 2.2 Windows
    17  65.30.97.9       65.30.34.80      ICMP PING CyberKit 2.2 Windows
    15  65.30.193.88     65.30.34.80      ICMP PING CyberKit 2.2 Windows
    14  65.30.205.204    65.30.34.80      ICMP PING CyberKit 2.2 Windows
    14  65.29.6.220      65.30.34.80      ICMP PING CyberKit 2.2 Windows
    14  65.30.146.224    65.30.34.80      ICMP PING CyberKit 2.2 Windows
    14  65.30.140.219    65.30.34.80      ICMP PING CyberKit 2.2 Windows
    14  65.29.219.81     65.30.34.80      ICMP PING CyberKit 2.2 Windows
...

-- 
= Management is doing things right; leadership is doing the     =
=       right things.    - Peter Drucker                        =
=_______________________________________________________________=
=     http://www.sun.com/service/sunps/jdc/javacenter.pdf       =
=  www.sun.com | www.javasoft.com | http://www.sun.com/sunone   =




More information about the Kclug mailing list