Security Incidents mailing list archives
Re: 8 hours of pinging
From: epadin () WAGWEB COM (Ed Padin)
Date: Tue, 28 Mar 2000 18:09:56 -0500
I have a client that's looking to block access to napster. Is there a way to find out all the IP addresses that the napster server uses? I know that a simple packet snatch can answer that but I want to make sure I get the whole range of addresses and was hoping that someone already had the information.
-----Original Message----- From: Foley, Michael P [mailto:michael_p_foley () GROTON PFIZER COM] Sent: Wednesday, March 22, 2000 2:26 PM To: INCIDENTS () SECURITYFOCUS COM Subject: 8 hours of pinging
SNOP
98ABE1CC.ipt.aol.com I have seen this happen with Napster running on my machine. Below is a copy of a log entry (Captured by BlackIce) while running Napster. Mar 12 2000 | 18:24:13 | Echo reply without request | 171.209.28.47 | MARKCUNN A full list of the log file can be seen at http://www.members.home.com/tragic101/icelog/log.html this list is updated in realtime as attacks occur. -mike On 20 Mar 2000, at 9:20, Jim Lindstrom wrote:I have a machine on the @Home network whose logs I monitor in real-time. Last night from 12:40am to about 8:35am (centralstandard ustime), the machine was continously pinged, at a rate of 5 to 10 times per minute, from machines all over the world. I don't think this was intended as a DDoS, due to the low rate of firings, but whatelse couldthis have been?
Current thread:
- Re: 8 hours of pinging Ed Padin (Mar 21)
- Re: 8 hours of pinging spiff (Mar 22)
- Curious HTTP related probings. Scott A . McIntyre (Mar 22)
- Re: Curious HTTP related probings. Erik Fichtner (Mar 22)
- Re: Curious HTTP related probings. Russell Fulton (Mar 22)
- [Fwd: [fw-wiz] Specious network performance measurements.] horio shoichi (Mar 22)
- <Possible follow-ups>
- Re: 8 hours of pinging Scott Wunsch (Mar 22)
- Re: 8 hours of pinging Robert Graham (Mar 22)
- Re: 8 hours of pinging Rainer Freis (Mar 27)
- Re: 8 hours of pinging Ed Padin (Mar 28)
- Re: 8 hours of pinging Dragos Ruiu (Mar 29)
- rooted by r0x - from address 212.177.241.127 Dwight Schauer (Mar 29)
- Re: rooted by r0x - from address 212.177.241.127 Ethan King (Mar 29)
- Re: rooted by r0x - from address 212.177.241.127 Rick Magill (Mar 30)
- sendmail/identd attack Guido A.J. Stevens (Mar 30)
- Re: rooted by r0x - from address 212.177.241.127 Ryan Russell (Mar 29)
- UDP port 9200 Bobby, Paul (Mar 30)
- Re: UDP port 9200 Robert Graham (Mar 30)
- Re: UDP port 9200 Joey McAlerney (Mar 30)
- Re: rooted by r0x - from address 212.177.241.127 Jens Hektor (Mar 31)