Attack of the icmp pinging morons.........

Zscoundrel Zscoundrel at kc.rr.com
Sun Aug 24 19:00:34 CDT 2003


Whew!!!  I am glad to see that my current dhcp address was not listed in 
your list!

Hanasaki JiJi wrote:

> Anyone else getting pinged DOS from
>     "ICMP PING CyberKit 2.2 Windows"
> This is the report from Snort.  There were over 12,000 of them in the 
> last 24hours.  This number has been increasing over the last week.  
> Most of the offending IP's seem to be from RR accounts.  Examples below:
>
> Events from same host to same destination using same method
>  # of  from             to               method
>    26  65.30.112.72     65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    19  65.30.148.72     65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    17  65.30.97.9       65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    15  65.30.193.88     65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.30.205.204    65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.29.6.220      65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.30.146.224    65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.30.140.219    65.30.34.80      ICMP PING CyberKit 2.2 Windows
>    14  65.29.219.81     65.30.34.80      ICMP PING CyberKit 2.2 Windows
> ...
>
>

-- 
There are only 10 types of people in the world: 
Those who understand binary, and those who don't




More information about the Kclug mailing list