[nsp-sec] Bracing For Impact... MS08-067

[Tom Fischer]

Hi,

On Fri, Oct 24, 2008 at 10:33:51AM -0400, Nicholas Ianelli wrote:
> > 212.227.93.146
> > 64.233.189.147
> > 202.108.22.44
> 
> Yes, there are some interesting IPs in that list. At this point all I
> know is that the list of three IP addresses listed above get sent an
> ICMP packet.

anyone able to provide a PCAP of such a ICMP packet - or is it just a
normal icmp echo request? (There's a lot of icmp recho request traffic
toward 212.227.93.146 (goole.com) - but hard to tell if it's malware
related or just typo stuff ... 

-- 
Tom Fischer
BFK edv-consulting GmbH                  tel: +49 721 962 01-1
Kriegsstr. 100, D-76133 Karlsruhe        fax: +49 721 962 01-99