strange ping messages

Dev Shed Forums Sponsor:

October 19th, 2002, 07:54 PM

nayeem

Junior Member

Join Date: Aug 2002

Location: london, uk

Posts: 9

Time spent in forums: < 1 sec
Reputation Power: 0

strange ping messages

i get very weird messages if i ping one of my servers. (please see the names of the server!). i cant figure out where its coming from.
any ideas ?

root@inshallah [/var/www/html/mrtg]# ping saipix.com
PING saipix.com (66.28.166.177) from 66.150.223.10 : 56(84) bytes of data.
64 bytes from grows.shrooms.us (66.28.166.177): icmp_seq=0 ttl=115 time=24.863 msec
64 bytes from grows.shrooms.us (66.28.166.177): icmp_seq=1 ttl=115 time=19.943 msec

--- saipix.com ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/mdev = 19.943/22.403/24.863/2.460 ms
root@inshallah [/var/www/html/mrtg]# ping 66.28.166.195
PING 66.28.166.195 (66.28.166.195) from 66.150.223.10 : 56(84) bytes of data.
64 bytes from 66.28.166.195: icmp_seq=0 ttl=115 time=19.768 msec
64 bytes from 66.28.166.195: icmp_seq=1 ttl=115 time=19.925 msec
64 bytes from 66.28.166.195: icmp_seq=2 ttl=115 time=19.920 msec

--- 66.28.166.195 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/mdev = 19.768/19.871/19.925/0.072 ms
root@inshallah [/var/www/html/mrtg]# ping primaryserver.us
PING primaryserver.us (66.28.166.195) from 66.150.223.10 : 56(84) bytes of data.
64 bytes from fukin.net (66.28.166.195): icmp_seq=0 ttl=115 time=20.452 msec

--- primaryserver.us ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max/mdev = 20.452/20.452/20.452/0.000 ms
root@inshallah [/var/www/html/mrtg]# ping onedns.net

root@inshallah [/var/www/html/mrtg]# ping onedns.com
ping: unknown host onedns.com
root@inshallah [/var/www/html/mrtg]# ping onedns.co.uk
PING onedns.co.uk (216.40.250.13) from 66.150.223.10 : 56(84) bytes of data.
64 bytes from 216.40.250.13: icmp_seq=0 ttl=246 time=6.049 msec
Warning: time of day goes back, taking countermeasures.
64 bytes from 216.40.250.13: icmp_seq=1 ttl=246 time=6.268 msec
64 bytes from 216.40.250.13: icmp_seq=2 ttl=246 time=6.180 msec

--- onedns.co.uk ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max/mdev = 6.049/6.165/6.268/0.127 ms
root@inshallah [/var/www/html/mrtg]# ping onedns.net
PING onedns.net (66.28.166.196) from 66.150.223.10 : 56(84) bytes of data.
64 bytes from start.fukin.net (66.28.166.196): icmp_seq=0 ttl=116 time=19.714 msec
64 bytes from start.fukin.net (66.28.166.196): icmp_seq=1 ttl=116 time=19.888 msec

--- onedns.net ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/mdev = 19.714/19.801/19.888/0.087 ms
root@inshallah [/var/www/html/mrtg]#

October 23rd, 2002, 01:28 PM

M.Hirsch

Contributing User

Dev Shed God 1st Plane (5500 - 5999 posts)

Join Date: Oct 2000

Location: Back in the real world.

Posts: 5,966

Time spent in forums: 1 Month 2 Days 52 m 24 sec
Reputation Power: 189

since we are here in security forum and not in the lounge, i don´t assume you are making jokes.
maybe your dns server got hacked? maybe it´s the machine you were on at this time (modified ping or /etc/resolv.conf)?

maybe only a joke by one of your sysadmins? / co-workers?

__________________
--
Manuel Hirsch - Linux, FreeBSD, programming, administration articles, tutorials and more.