North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Really odd pings going out
the four IPs... in the mcsp.com domain swip.net domain the machine dsmmr.shoalhaven.net.au. in the iij.ad.jp domain --- some process is trying to call home... part of a botnet perhaps. --bill On Tue, Oct 18, 2005 at 05:02:23PM -0700, Nicole wrote: > > > > Hello All. > I have seen people writing in now and again with things like this and I never > thought I would be one of them. But here goes. > > After doing a netgear firewall upgrade which suplpied some extra information, > I started noticing these odd pings to all over the place from a computer I have. > I don't notce any attempted return traffic from the same Ip's. So I am > at a loss as to what this could be or why. Any thoughts would be appreciated. > > > - Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:28 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:29 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 01:10:30 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:04 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:05 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default rule > match] > Mon, 2005-10-17 16:11:06 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN > - Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default rule > match] > > Its a dell computer supplied to me by my employer that I use for 2 > purposes. I installed firefox for keeping an eye on our MRTG graphs and to use > SKYPE as required by them. Except for a Java developers toolkit that I had > to install to help with development testing once, (which I uninstalled) and > the myriad of crap software that came free with the computer, that is all that > has ever been installed that I am aware of. > > I did recently, becouse of this, install startup cop to see what might > be starting up on bootups. (at least non services wize) I uninstalled a few > other items that I knew I would never used and disabled those that looked odd. > But still.. the pings go out about once or twice a day. > > I have not had a chance to turn off skype to see if that is what is > doing it. But it is in no way connected to talking via skype. But why on earth > would skpe send out these random pings all over the globe? > > > Thanks! > > > Nicole >
|