Security Incidents mailing list archives

Re: Strange ping reply packets


From: admin () DEVIANCE ORG (Pavel Aubuchon-Mendoza)
Date: Thu, 10 Feb 2000 09:52:04 -0500


Arthur, I don't think the IP's are randomly generated.. Check out these
addresses..

212.151.36.6     [3,30]
128.210.131.189  [10,38]
129.82.96.191    [11,42]
209.166.140.96   [14,45]
203.134.57.37    [22,40]

Those matches were found at the lines specified in your log. If you are
seeing duplicate IP addresses more than 10 sec apart, some of those may be
real. Is it possible this is legitimate traffic?

Pavel


Current thread: