Re: ICMP port 2048 scans

Valdis.Kletnieks_at_vt.edu
Date: 08/24/03

  • Next message: Pall Thayer: "strange web traffic" 
    To: Ryan McConky <rmcconky@webmd.net>
Date: Sat, 23 Aug 2003 21:52:25 -0400

    On Fri, 22 Aug 2003 21:50:53 -0000, Ryan McConky <rmcconky@webmd.net> said:
    > In-Reply-To: <Law15-F50f3sllNY30k0001b928@hotmail.com>
    >
    > We are seeing the same thing on our routers. What is troubling me is that
    > it is incrementing the dest ip by one each second. Like it is scanning.
    > It is scanning internal and external networks. Most traced to Asian
    > countries. Anyone else seeing this?

    Hmm.. you *just* noticed the Nachi worm ping-scanning your net, huh? ;)

    Wait a bit, you'll see it from all over. If you had any unpatched windows boxes
    on your net, you'll be seeing it from inside your net too.. ;)

  • Next message: Pall Thayer: "strange web traffic"