[Dshield] ping sweep
Neil G. Lovering
nlovering at nle-inc.com
Thu Sep 18 22:28:21 GMT 2003
I just started looking at a W2k server for a customer, and when I fired
up Network Monitor, it seems that the server itself is doing a massive
ping sweep of the entire 192.168.x.y IP range. Has anyone seen such
behavior before, or know what might be the source of this?
There also seems to be a considerable number of outgoing echoes to
various asiapac IP addresses. A quick search by spybot found a few
minor things, but the ping (echoes) continue.
More information about the list