ICMP code 3 type 2 scans?

From: Glenn Forbes Fleming Larratt (glrattat_private)
Date: Mon Jun 04 2001 - 07:48:40 PDT
Next message: John Oliver: "Re: another rootkit - one more file (fwd)"
Previous message: Fernando Cardoso: "RE: another rootkit - one more file (fwd)"
Next in thread: Russell Fulton: "Re: ICMP code 3 type 2 scans?"
Reply: Russell Fulton: "Re: ICMP code 3 type 2 scans?"
Reply: john.smith@minolta-qms.com: "RE: ICMP code 3 type 2 scans?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Never seen these before this week, and now have two in rapid succession.
New exploit? I *know* that my whole Class B is not banging on that
one 24-net host, especially the unallocated subnets :|

	-g

-- 
Glenn Forbes Fleming Larratt         The Lab Ratt (not briggs :-) 
glrattat_private                        http://www.io.com/~glratt  
There are imaginary bugs to chase in heaven.


Jun  4 02:21:11 icmp 24.77.68.1 -> my.net.136.230 (3/2), 1 packet
Jun  4 02:21:15 icmp 24.77.68.1 -> my.net.211.187 (3/2), 1 packet
Jun  4 02:21:16 icmp 24.77.68.1 -> my.net.36.253 (3/2), 1 packet
Jun  4 02:21:26 icmp 24.77.68.1 -> my.net.97.11 (3/2), 1 packet
Jun  4 02:21:39 icmp 24.77.68.1 -> my.net.105.75 (3/2), 1 packet
Jun  4 02:21:44 icmp 24.77.68.1 -> my.net.52.52 (3/2), 1 packet
Jun  4 02:21:45 icmp 24.77.68.1 -> my.net.177.224 (3/2), 1 packet
Jun  4 02:22:13 icmp 24.77.68.1 -> my.net.88.222 (3/2), 1 packet
Jun  4 02:22:29 icmp 24.77.68.1 -> my.net.86.193 (3/2), 1 packet
Jun  4 02:22:36 icmp 24.77.68.1 -> my.net.102.193 (3/2), 1 packet
Jun  4 02:22:39 icmp 24.77.68.1 -> my.net.156.36 (3/2), 1 packet
Jun  4 02:22:42 icmp 24.77.68.1 -> my.net.218.208 (3/2), 1 packet
Jun  4 02:22:46 icmp 24.77.68.1 -> my.net.222.15 (3/2), 1 packet
Jun  4 02:22:51 icmp 24.77.68.1 -> my.net.248.171 (3/2), 1 packet
Jun  4 02:22:52 icmp 24.77.68.1 -> my.net.244.223 (3/2), 1 packet
Jun  4 02:23:01 icmp 24.77.68.1 -> my.net.198.9 (3/2), 1 packet
Jun  4 02:23:21 icmp 24.77.68.1 -> my.net.150.249 (3/2), 1 packet
Jun  4 02:23:39 icmp 24.77.68.1 -> my.net.180.210 (3/2), 1 packet
Jun  4 02:24:24 icmp 24.77.68.1 -> my.net.113.26 (3/2), 1 packet
Jun  4 02:24:32 icmp 24.77.68.1 -> my.net.19.174 (3/2), 1 packet
Jun  4 02:24:34 icmp 24.77.68.1 -> my.net.145.127 (3/2), 1 packet
Jun  4 02:24:36 icmp 24.77.68.1 -> my.net.243.143 (3/2), 1 packet
Jun  4 02:24:37 icmp 24.77.68.1 -> my.net.111.196 (3/2), 1 packet
Jun  4 02:24:46 icmp 24.77.68.1 -> my.net.14.123 (3/2), 1 packet
Jun  4 02:24:47 icmp 24.77.68.1 -> my.net.117.187 (3/2), 1 packet
Jun  4 02:24:56 icmp 24.77.68.1 -> my.net.62.206 (3/2), 1 packet
Jun  4 02:24:58 icmp 24.77.68.1 -> my.net.102.240 (3/2), 1 packet
Jun  4 02:25:21 icmp 24.77.68.1 -> my.net.204.118 (3/2), 1 packet
Jun  4 02:25:23 icmp 24.77.68.1 -> my.net.108.231 (3/2), 1 packet
Jun  4 02:25:38 icmp 24.77.68.1 -> my.net.88.226 (3/2), 1 packet
Jun  4 02:25:42 icmp 24.77.68.1 -> my.net.52.226 (3/2), 1 packet
Jun  4 02:25:44 icmp 24.77.68.1 -> my.net.114.56 (3/2), 1 packet
Jun  4 02:25:47 icmp 24.77.68.1 -> my.net.199.37 (3/2), 1 packet
Jun  4 02:25:48 icmp 24.77.68.1 -> my.net.180.90 (3/2), 1 packet
Jun  4 02:25:50 icmp 24.77.68.1 -> my.net.117.224 (3/2), 1 packet
Jun  4 02:25:58 icmp 24.77.68.1 -> my.net.169.103 (3/2), 1 packet
Jun  4 02:25:59 icmp 24.77.68.1 -> my.net.145.117 (3/2), 1 packet
Jun  4 02:26:08 icmp 24.77.68.1 -> my.net.96.161 (3/2), 1 packet
Jun  4 02:26:17 icmp 24.77.68.1 -> my.net.175.246 (3/2), 1 packet
Jun  4 02:26:21 icmp 24.77.68.1 -> my.net.142.101 (3/2), 1 packet
Jun  4 02:26:32 icmp 24.77.68.1 -> my.net.47.250 (3/2), 1 packet
Jun  4 02:26:35 icmp 24.77.68.1 -> my.net.149.102 (3/2), 1 packet
Jun  4 02:26:46 icmp 24.77.68.1 -> my.net.74.65 (3/2), 1 packet
Jun  4 02:26:47 icmp 24.77.68.1 -> my.net.166.62 (3/2), 1 packet
Jun  4 02:26:54 icmp 24.77.68.1 -> my.net.19.245 (3/2), 1 packet
Jun  4 02:26:58 icmp 24.77.68.1 -> my.net.171.84 (3/2), 1 packet
Jun  4 02:27:06 icmp 24.77.68.1 -> my.net.5.111 (3/2), 1 packet
Jun  4 02:27:24 icmp 24.77.68.1 -> my.net.209.66 (3/2), 1 packet
Jun  4 02:27:28 icmp 24.77.68.1 -> my.net.147.238 (3/2), 1 packet
Jun  4 02:27:37 icmp 24.77.68.1 -> my.net.132.39 (3/2), 1 packet
Jun  4 02:27:43 icmp 24.77.68.1 -> my.net.23.17 (3/2), 1 packet
Jun  4 02:28:05 icmp 24.77.68.1 -> my.net.125.130 (3/2), 1 packet
Jun  4 02:28:09 icmp 24.77.68.1 -> my.net.185.147 (3/2), 1 packet
Jun  4 02:28:14 icmp 24.77.68.1 -> my.net.168.22 (3/2), 1 packet
Jun  4 02:28:22 icmp 24.77.68.1 -> my.net.246.155 (3/2), 1 packet
Jun  4 02:28:34 icmp 24.77.68.1 -> my.net.20.219 (3/2), 1 packet
Jun  4 02:28:54 icmp 24.77.68.1 -> my.net.80.4 (3/2), 1 packet
Jun  4 02:28:57 icmp 24.77.68.1 -> my.net.27.201 (3/2), 1 packet
Jun  4 02:28:59 icmp 24.77.68.1 -> my.net.246.165 (3/2), 1 packet
Jun  4 02:29:00 icmp 24.77.68.1 -> my.net.109.171 (3/2), 1 packet
Jun  4 02:29:01 icmp 24.77.68.1 -> my.net.157.118 (3/2), 1 packet
Jun  4 02:29:42 icmp 24.77.68.1 -> my.net.32.121 (3/2), 1 packet
Jun  4 02:30:26 icmp 24.77.68.1 -> my.net.101.13 (3/2), 1 packet
Jun  4 02:30:43 icmp 24.77.68.1 -> my.net.152.1 (3/2), 1 packet
Jun  4 02:31:12 icmp 24.77.68.1 -> my.net.197.46 (3/2), 1 packet
Jun  4 02:31:38 icmp 24.77.68.1 -> my.net.94.53 (3/2), 1 packet
Jun  4 02:31:39 icmp 24.77.68.1 -> my.net.28.125 (3/2), 1 packet
Jun  4 02:31:48 icmp 24.77.68.1 -> my.net.226.235 (3/2), 1 packet
Jun  4 02:31:49 icmp 24.77.68.1 -> my.net.173.217 (3/2), 1 packet
Jun  4 02:32:16 icmp 24.77.68.1 -> my.net.132.211 (3/2), 1 packet
Jun  4 02:32:24 icmp 24.77.68.1 -> my.net.214.122 (3/2), 1 packet
Jun  4 02:32:29 icmp 24.77.68.1 -> my.net.159.103 (3/2), 1 packet
Jun  4 02:32:38 icmp 24.77.68.1 -> my.net.249.117 (3/2), 1 packet
Jun  4 02:33:03 icmp 24.77.68.1 -> my.net.215.174 (3/2), 1 packet
Jun  4 02:33:35 icmp 24.77.68.1 -> my.net.215.46 (3/2), 1 packet
Jun  4 02:33:49 icmp 24.77.68.1 -> my.net.31.97 (3/2), 1 packet
Jun  4 02:34:04 icmp 24.77.68.1 -> my.net.85.55 (3/2), 1 packet
Jun  4 02:34:06 icmp 24.77.68.1 -> my.net.77.39 (3/2), 1 packet
Jun  4 02:34:10 icmp 24.77.68.1 -> my.net.235.238 (3/2), 1 packet
Jun  4 02:34:11 icmp 24.77.68.1 -> my.net.183.82 (3/2), 1 packet
Jun  4 02:34:25 icmp 24.77.68.1 -> my.net.177.144 (3/2), 1 packet
Jun  4 02:34:31 icmp 24.77.68.1 -> my.net.82.178 (3/2), 1 packet
Jun  4 02:34:44 icmp 24.77.68.1 -> my.net.3.244 (3/2), 1 packet
Jun  4 02:34:45 icmp 24.77.68.1 -> my.net.235.152 (3/2), 1 packet
Jun  4 02:35:02 icmp 24.77.68.1 -> my.net.254.195 (3/2), 1 packet
Jun  4 02:35:03 icmp 24.77.68.1 -> my.net.200.153 (3/2), 1 packet
Jun  4 02:35:14 icmp 24.77.68.1 -> my.net.187.44 (3/2), 1 packet
Jun  4 02:35:21 icmp 24.77.68.1 -> my.net.163.160 (3/2), 1 packet
Jun  4 02:35:22 icmp 24.77.68.1 -> my.net.70.179 (3/2), 1 packet
Jun  4 02:35:24 icmp 24.77.68.1 -> my.net.48.10 (3/2), 1 packet
Jun  4 02:35:30 icmp 24.77.68.1 -> my.net.173.138 (3/2), 1 packet
Jun  4 02:35:32 icmp 24.77.68.1 -> my.net.147.165 (3/2), 1 packet
Jun  4 02:35:52 icmp 24.77.68.1 -> my.net.149.54 (3/2), 1 packet
Jun  4 02:35:55 icmp 24.77.68.1 -> my.net.134.157 (3/2), 1 packet
Jun  4 02:36:03 icmp 24.77.68.1 -> my.net.169.52 (3/2), 1 packet
Jun  4 02:36:06 icmp 24.77.68.1 -> my.net.221.142 (3/2), 1 packet
Jun  4 02:36:07 icmp 24.77.68.1 -> my.net.156.234 (3/2), 1 packet
Jun  4 02:36:12 icmp 24.77.68.1 -> my.net.26.81 (3/2), 1 packet
Jun  4 02:36:14 icmp 24.77.68.1 -> my.net.61.116 (3/2), 1 packet
Jun  4 02:36:23 icmp 24.77.68.1 -> my.net.111.140 (3/2), 1 packet
Jun  4 02:36:26 icmp 24.77.68.1 -> my.net.23.66 (3/2), 1 packet
Jun  4 02:36:35 icmp 24.77.68.1 -> my.net.25.226 (3/2), 1 packet
Jun  4 02:36:36 icmp 24.77.68.1 -> my.net.98.179 (3/2), 1 packet
Jun  4 02:36:43 icmp 24.77.68.1 -> my.net.82.14 (3/2), 1 packet
Jun  4 02:36:47 icmp 24.77.68.1 -> my.net.106.227 (3/2), 1 packet
Jun  4 02:37:00 icmp 24.77.68.1 -> my.net.12.101 (3/2), 1 packet
Jun  4 02:37:11 icmp 24.77.68.1 -> my.net.168.63 (3/2), 1 packet
Jun  4 02:37:15 icmp 24.77.68.1 -> my.net.238.2 (3/2), 1 packet
Jun  4 02:37:25 icmp 24.77.68.1 -> my.net.117.197 (3/2), 1 packet
Jun  4 02:37:30 icmp 24.77.68.1 -> my.net.142.125 (3/2), 1 packet
Jun  4 02:37:39 icmp 24.77.68.1 -> my.net.183.219 (3/2), 1 packet
Jun  4 02:37:40 icmp 24.77.68.1 -> my.net.91.69 (3/2), 1 packet
Jun  4 02:37:49 icmp 24.77.68.1 -> my.net.162.144 (3/2), 1 packet
Jun  4 02:37:52 icmp 24.77.68.1 -> my.net.120.124 (3/2), 1 packet
Jun  4 02:38:14 icmp 24.77.68.1 -> my.net.47.44 (3/2), 1 packet
Jun  4 02:38:24 icmp 24.77.68.1 -> my.net.199.153 (3/2), 1 packet
Jun  4 02:38:30 icmp 24.77.68.1 -> my.net.114.89 (3/2), 1 packet
Jun  4 02:38:41 icmp 24.77.68.1 -> my.net.166.75 (3/2), 1 packet
Jun  4 02:38:43 icmp 24.77.68.1 -> my.net.206.163 (3/2), 1 packet
Jun  4 02:38:49 icmp 24.77.68.1 -> my.net.162.170 (3/2), 1 packet
Jun  4 02:38:52 icmp 24.77.68.1 -> my.net.2.44 (3/2), 1 packet
Jun  4 02:39:05 icmp 24.77.68.1 -> my.net.235.38 (3/2), 1 packet
Jun  4 02:39:11 icmp 24.77.68.1 -> my.net.142.29 (3/2), 1 packet
Jun  4 02:39:17 icmp 24.77.68.1 -> my.net.104.254 (3/2), 1 packet
Jun  4 02:39:19 icmp 24.77.68.1 -> my.net.150.94 (3/2), 1 packet
Jun  4 02:39:36 icmp 24.77.68.1 -> my.net.159.239 (3/2), 1 packet
Jun  4 02:40:12 icmp 24.77.68.1 -> my.net.246.212 (3/2), 1 packet
Jun  4 02:40:29 icmp 24.77.68.1 -> my.net.142.37 (3/2), 1 packet
Jun  4 02:40:36 icmp 24.77.68.1 -> my.net.26.156 (3/2), 1 packet
Jun  4 02:40:37 icmp 24.77.68.1 -> my.net.107.34 (3/2), 1 packet
Jun  4 02:40:39 icmp 24.77.68.1 -> my.net.109.152 (3/2), 1 packet
Jun  4 02:40:44 icmp 24.77.68.1 -> my.net.233.61 (3/2), 1 packet
Jun  4 02:40:45 icmp 24.77.68.1 -> my.net.246.84 (3/2), 1 packet
Jun  4 02:40:49 icmp 24.77.68.1 -> my.net.172.237 (3/2), 1 packet
Jun  4 02:40:50 icmp 24.77.68.1 -> my.net.108.173 (3/2), 1 packet
Jun  4 02:40:52 icmp 24.77.68.1 -> my.net.89.178 (3/2), 1 packet
Jun  4 02:41:07 icmp 24.77.68.1 -> my.net.10.60 (3/2), 1 packet
Jun  4 02:41:09 icmp 24.77.68.1 -> my.net.143.100 (3/2), 1 packet
Jun  4 02:41:17 icmp 24.77.68.1 -> my.net.180.28 (3/2), 1 packet
Jun  4 02:41:23 icmp 24.77.68.1 -> my.net.4.27 (3/2), 1 packet
Jun  4 02:41:34 icmp 24.77.68.1 -> my.net.237.81 (3/2), 1 packet
Jun  4 02:41:35 icmp 24.77.68.1 -> my.net.15.204 (3/2), 1 packet
Jun  4 02:41:39 icmp 24.77.68.1 -> my.net.85.4 (3/2), 1 packet
Jun  4 02:42:05 icmp 24.77.68.1 -> my.net.43.205 (3/2), 1 packet
Jun  4 02:42:22 icmp 24.77.68.1 -> my.net.76.19 (3/2), 1 packet
Jun  4 02:42:24 icmp 24.77.68.1 -> my.net.128.61 (3/2), 1 packet
Next message: John Oliver: "Re: another rootkit - one more file (fwd)"
Previous message: Fernando Cardoso: "RE: another rootkit - one more file (fwd)"
Next in thread: Russell Fulton: "Re: ICMP code 3 type 2 scans?"
Reply: Russell Fulton: "Re: ICMP code 3 type 2 scans?"
Reply: john.smith@minolta-qms.com: "RE: ICMP code 3 type 2 scans?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
This archive was generated by hypermail 2b30 : Mon Jun 04 2001 - 09:48:21 PDT