Attack of the icmp pinging morons.........
Zscoundrel
Zscoundrel at kc.rr.com
Sun Aug 24 19:00:34 CDT 2003
Whew!!! I am glad to see that my current dhcp address was not listed in
your list!
Hanasaki JiJi wrote:
> Anyone else getting pinged DOS from
> "ICMP PING CyberKit 2.2 Windows"
> This is the report from Snort. There were over 12,000 of them in the
> last 24hours. This number has been increasing over the last week.
> Most of the offending IP's seem to be from RR accounts. Examples below:
>
> Events from same host to same destination using same method
> # of from to method
> 26 65.30.112.72 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> 19 65.30.148.72 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> 17 65.30.97.9 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> 15 65.30.193.88 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> 14 65.30.205.204 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> 14 65.29.6.220 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> 14 65.30.146.224 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> 14 65.30.140.219 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> 14 65.29.219.81 65.30.34.80 ICMP PING CyberKit 2.2 Windows
> ...
>
>
--
There are only 10 types of people in the world:
Those who understand binary, and those who don't
More information about the Kclug
mailing list