[Dshield] ping sweep

Neil G. Lovering nlovering at nle-inc.com
Thu Sep 18 22:28:21 GMT 2003


Hey all,

I just started looking at a W2k server for a customer, and when I fired
up Network Monitor, it seems that the server itself is doing a massive
ping sweep of the entire 192.168.x.y IP range.  Has anyone seen such
behavior before, or know what might be the source of this?

There also seems to be a considerable number of outgoing echoes to
various asiapac IP addresses.  A quick search by spybot found a few
minor things, but the ping (echoes) continue.

Neil









More information about the list mailing list