block scanning?

Does anybody else notice themselves getting scanned via icmp pretty often?

20:11:44.728258 amjm28qpy50e.bc.hsia.telus.net > pimp.dreness.com: icmp 72: echo request seq 64810
20:11:46.955269 amjm28qpy50e.bc.hsia.telus.net > bish.dreness.com: icmp 72: echo request seq 24363
20:12:01.861614 as53-p02-wny-037.modempools.net > pimp.dreness.com: icmp 72: echo request seq 49398
20:12:02.770763 as53-p02-wny-037.modempools.net > bish.dreness.com: icmp 72: echo request seq 8951
20:12:18.349973 bc174212.bendcable.com > pimp.dreness.com: icmp 72: echo request seq 41242
20:12:20.429096 aojg55l6y48yc.bc.hsia.telus.net > pimp.dreness.com: icmp 72: echo request seq 61774
20:12:21.062071 bc174212.bendcable.com > bish.dreness.com: icmp 72: echo request seq 795
20:12:21.260151 aojg55l6y48yc.bc.hsia.telus.net > bish.dreness.com: icmp 72: echo request seq 21327
20:12:55.027293 bc16597.bendcable.com > pimp.dreness.com: icmp 72: echo request seq 39934
20:12:58.014062 bc16597.bendcable.com > bish.dreness.com: icmp 72: echo request seq 65022
20:13:17.568386 ca4-216-229-40-129.cos.pcisys.net > pimp.dreness.com: icmp 72: echo request seq 65068
20:13:20.545880 ca4-216-229-40-129.cos.pcisys.net > bish.dreness.com: icmp 72: echo request seq 24621
20:13:53.362273 216.233.144.112 > pimp.dreness.com: icmp 72: echo request seq 9439
20:13:59.755391 216.233.144.112 > bish.dreness.com: icmp 72: echo request seq 34527
20:14:53.225594 216.233.192.58 > pimp.dreness.com: icmp 72: echo request seq 952
20:16:14.908692 216.233.224.24 > bish.dreness.com: icmp 72: echo request seq 21547

About dre

I like all kinds of food.
This entry was posted in lj. Bookmark the permalink.

3 Responses to block scanning?

  1. dre says:

    So I talked to some people on IRC and apparently this is not uncommon at all. I guess it’s been a while since I actually looked at traffic that closely. I don’t have to write an nmap fingerprinting script to know that these are most likely trojan’d windoze machines :/

  2. lenox says:

    att actually BLOCKED all ICMP traffic for a bit, it got so bad. not sure if it’s still that way.

    weird.

Leave a Reply