ICMP requests from Content Delivery Network

jlarsen · 07-17-2008, 01:52 PM

I'm using iptables to log ICMP requests and have noticed a large number ICMP TYPE=8 (echo) requests in the log file. There will be about 200 ICMPs within 2 or 3 tenths of a second. There are probably about 50 unique ip addresses that they come from.

I randomly picked some of the ip addresses and did a whois and they all seem to belong to Panther Express, which a quick google shows to be a content delivery network.

Any ideas?

chort · 07-17-2008, 09:34 PM

They're testing reachability to your network from their content servers to determine which is "closest".