[nsp-sec] Ping University of Pennsylvania

Krista Hickey Krista.Hickey at cogeco.com
Mon May 10 15:38:31 EDT 2010


If there's anyone from University of Pennsylvania around (or anyone who can proxy something off to folks there) I'd appreciate it if you could eyeball 128.91.108.33 as we've been seeing that IP hitting one of our interfaces with ICMP traffic since last night approx 18:44 EST (-0500),

   <snip>	
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFB7F, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFB7D, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFB7D, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFBA9, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFBA9, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFBAA, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFBAA, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFBD6, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFBD6, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFBD7, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFC09, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFC0A, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFC0A, ttl: 47, prot: 1
  source: 128.91.108.33, destination: 67.69.228.6, id: 0xFC0A, ttl: 47, prot: 1
   </snip>

There were a few sources to the apparent attack and all but University of Pennsylvania have ceased as of today so our network guys asked if I could poke someone. 

Thanks
Krista
7992




More information about the nsp-security mailing list