Security Incidents: RE: Strange pings from akamai?

From: James Cook <james.cook_at_dsl.pipex.com>
Date: Thu, 8 Aug 2002 17:02:51 +0100

They seem to have stopped now, but for the last couple weeks my home PC has
been getting ICMP requests from 213.56.194.53
(a213-56-194-53.deploy.akamaitechnologies.com)
.

They always seem to come in blocks of 12 in a row with 20 seconds between
each request.

Also, they seem to be preceeded or followed by the same pattern from various
other hosts. For example, 24.94.162.92 (mkc-162-092.kc.rr.com) or
24.130.30.75 (ak-24-130-30-75.we.ipsvc.net).

Any info would be good - I was wondering about this myself.

Cheers
James

-----Original Message-----
From: Jeff Kell [mailto:jeff-kell_at_utc.edu]
Sent: 08 August 2002 04:34
To: Incidents
Subject: Strange pings from akamai?

Out of the wild blue, I logged some unexpected pings:

209.92.223.82:0(209-92-223-82.deploy.akamaitechnologies.com) ICMP Ping

Now I know they do lots of click-thru and banner ads, but is Akamai now
starting to keep tabs on our online time? or something more sinister?

This was logged on my home computer firewall, I wasn't even here. I
don't bother with logging pings at the office so I don't know if this
is widespread or I just happened to be singled out for some reason.

Anyone else seen this?

Jeff

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com