|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: Re: Weird Ping requests
From: Richard Bejtlich (bejtlich
TEXAS.NET)Date: Tue Apr 18 2000 - 14:36:06 CDT
- Next message: Spoonm Spoonm: "Re: sadmind hack?"
- Previous message: Anton Chuvakin: "Tools to analyze "captured" binaries?"
- In reply to: Erick Brockway: "Weird Ping requests"
- Next in thread: Erick Brockway: "Re: Weird Ping requests"
- Reply: Richard Bejtlich: "Re: Weird Ping requests"
- Reply: Erick Brockway: "Re: Weird Ping requests"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Erick,
This may be the result of someone trying a Smurf-type attack
upon your machine. I resolved your IP and saw it was an
Earthlink dial-up. Did you take any actions which might
cause someone to Smurf you? Typically we see this with IRC
warfare or against high profile web servers, etc.
Richard
-----
Looked at my AtGuard log last night, and something weird
showed up there.
Started with;
4/15/00 19:36:46.383 NDIS Filter Rule "Default Inbound
ICMP" permitted (206.204.217.22,0). Details:
Inbound ICMP request
Local address is (209.178.128.182)
Remote address is (206.204.217.22)
Message type is "Echo Reply"
Erick Brockway
- Next message: Spoonm Spoonm: "Re: sadmind hack?"
- Previous message: Anton Chuvakin: "Tools to analyze "captured" binaries?"
- In reply to: Erick Brockway: "Weird Ping requests"
- Next in thread: Erick Brockway: "Re: Weird Ping requests"
- Reply: Richard Bejtlich: "Re: Weird Ping requests"
- Reply: Erick Brockway: "Re: Weird Ping requests"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]