I recently setup Snort. In the log our external IP Address remains the same but their IP Address increments by 1 from x.x.x.1 – x.x.x.254. Any idea of what is occurring?
[**] [1:486:2] ICMP Destination Unreachable (Communication with Destination Host is Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
07/29-15:19:18.469870 0:9:E8:29:9E:A0 -> 0:9:E8:39:E7:EC type:0x800 len:0x46
134.130.198.63 -> X.X.X.146 ICMP TTL:237 TOS:0x0 ID:6424 IpLen:20 DgmLen:56 DF
Type:3 Code:10 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED HOST FILTERED
** ORIGINAL DATAGRAM DUMP:
X.X.X.146:49589 -> 134.130.198.63:137 UDP TTL:111 TOS:0x0 ID:5060 IpLen:20 DgmLen:78
Len: 58
** END OF DUMP
[**] [1:486:2] ICMP Destination Unreachable (Communication with Destination Host is Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
07/29-15:19:18.621320 0:9:E8:29:9E:A0 -> 0:9:E8:39:E7:EC type:0x800 len:0x46
134.130.198.64 -> X.X.X.146 ICMP TTL:237 TOS:0x0 ID:18881 IpLen:20 DgmLen:56 DF
Type:3 Code:10 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED HOST FILTERED
** ORIGINAL DATAGRAM DUMP:
X.X.X.146:49589 -> 134.130.198.64:137 UDP TTL:111 TOS:0x0 ID:6852 IpLen:20 DgmLen:78
Len: 58
** END OF DUMP
[**] [1:486:2] ICMP Destination Unreachable (Communication with Destination Host is Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
07/29-15:19:18.771442 0:9:E8:29:9E:A0 -> 0:9:E8:39:E7:EC type:0x800 len:0x46
134.130.198.65 -> X.X.X.146 ICMP TTL:237 TOS:0x0 ID:6425 IpLen:20 DgmLen:56 DF
Type:3 Code:10 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED HOST FILTERED
** ORIGINAL DATAGRAM DUMP:
X.X.X.146:49589 -> 134.130.198.65:137 UDP TTL:111 TOS:0x0 ID:9668 IpLen:20 DgmLen:78
Len: 58
** END OF DUMP
