Re: ICMP port 2048 scans

From: Valdis.Kletnieksat_private
Date: Sat Aug 23 2003 - 18:52:25 PDT

  • Next message: Jeff Peterson: "RE: Software vendor clueless"

    On Fri, 22 Aug 2003 21:50:53 -0000, Ryan McConky <rmcconkyat_private>  said:
    > In-Reply-To: <Law15-F50f3sllNY30k0001b928at_private>
    > 
    > We are seeing the same thing on our routers. What is troubling me is that 
    > it is incrementing the dest ip by one each second. Like it is scanning. 
    > It is scanning internal and external networks. Most traced to Asian 
    > countries. Anyone else seeing this?
    
    Hmm.. you *just* noticed the Nachi worm ping-scanning your net, huh? ;)
    
    Wait a bit, you'll see it from all over.  If you had any unpatched windows boxes
    on your net, you'll be seeing it from inside your net too.. ;)
    
    
    



    This archive was generated by hypermail 2b30 : Tue Aug 26 2003 - 08:22:30 PDT