Security Incidents mailing list archives

Re: Weird Ping requests


From: bejtlich () TEXAS NET (Richard Bejtlich)
Date: Tue, 18 Apr 2000 19:36:06 -0000


Erick,

This may be the result of someone trying a Smurf-type attack
upon your machine.  I resolved your IP and saw it was an
Earthlink dial-up.  Did you take any actions which might
cause someone to Smurf you?  Typically we see this with IRC
warfare or against high profile web servers, etc.

Richard

-----

    Looked at my AtGuard log last night, and something weird
showed up there. 
    Started with;
 4/15/00 19:36:46.383 NDIS Filter Rule "Default Inbound
ICMP" permitted (206.204.217.22,0).  Details:
Inbound ICMP request 
Local address is (209.178.128.182)
Remote address is (206.204.217.22)
Message type is "Echo Reply"
    
Erick Brockway


Current thread: