full-disclosure - [UPDATE] ping floods

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1D91D7937A3B1745A38DB5DE8424806023144F@mail5.tri-c.edu>
From: Jon.Dolinar at tri-c.edu (Dolinar, Jon)
Subject: [UPDATE] ping floods

We are currently seeing in our firewall logs excessive ICMP type 8
request followed by probes on TCP port 135 coming from multiple sites
throughout the internet. Early this caused a DOS on our ISP's router
ahead of our firewall. 

Jon Dolinar
Network Security Supervisor
Cuyahoga Community College
Jon.dolinar@...-c.edu
216.987.4354

-----Original Message-----
From: Abraham, Antony (Cognizant) [mailto:Antony@....cognizant.com] 
Sent: Monday, August 18, 2003 10:18 AM
To: B3r3n@...osnet.com; full-disclosure@...ts.netsys.com
Cc: Frank.Ederveen@...on-europe.com
Subject: RE: [Full-Disclosure] [UPDATE] ping floods

Hi,

We do have the same problem. Incidents.org has recorded the same
(http://isc.incidents.org/) but not much detail available.

Thanks,

Antony Abraham 

-----Original Message-----
From: B3r3n@...osnet.com [mailto:B3r3n@...osnet.com]
Sent: Monday, August 18, 2003 6:59 PM
To: full-disclosure@...ts.netsys.com
Cc: Frank.Ederveen@...on-europe.com
Subject: [Full-Disclosure] [UPDATE] ping floods

Frank,

Yes, exactly, our ICMP requests are also detected as Cyber kit 2.2

Seems we share the same problem.

Some others too?

Brgrds

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html