[Dshield] ping sweep

Rick Leske rick at jaray.net
Thu Sep 18 23:12:31 GMT 2003


umm possibly a virus trying to find network shares?

sweep it for bugs:

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

~Rick

> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
> Behalf Of Neil G. Lovering
> Sent: Thursday, September 18, 2003 5:28 PM - FamHost
> To: General DShield Discussion List
> Subject: [Dshield] ping sweep
> 
> 
> Hey all,
> 
> I just started looking at a W2k server for a customer, and when I fired
> up Network Monitor, it seems that the server itself is doing a massive
> ping sweep of the entire 192.168.x.y IP range.  Has anyone seen such
> behavior before, or know what might be the source of this?
> 
> There also seems to be a considerable number of outgoing echoes to
> various asiapac IP addresses.  A quick search by spybot found a few
> minor things, but the ping (echoes) continue.
> 
> Neil 
___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.




More information about the list mailing list