Really odd pings going out

Wed Oct 19 00:56:46 UTC 2005


the four IPs... 

	in the mcsp.com domain
	       swip.net domain
	the machine dsmmr.shoalhaven.net.au.
	in the  iij.ad.jp domain

--- some process is trying to call home...  part of a botnet perhaps.

--bill
	

On Tue, Oct 18, 2005 at 05:02:23PM -0700, Nicole wrote:
> 
> 
> 
>  Hello All.
>   I have seen people writing in now and again with things like this and I never
> thought I would be one of them. But here goes.
> 
>  After doing a netgear firewall upgrade which suplpied some extra information,
> I started noticing these odd pings to all over the place from a computer I have.
> I don't notce any attempted return traffic from the same Ip's. So I am
> at a loss as to what this could be or why. Any thoughts would be appreciated.
>  
> 
> - Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:28 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:29 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 01:10:30 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:04 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:05 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> Mon, 2005-10-17 16:11:06 - ICMP packet - Source:192.168.1.3,[Echo Request],LAN
> - Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default rule
> match]
> 
>  Its a dell computer supplied to me by my employer that I use for 2
> purposes. I installed firefox for keeping an eye on our MRTG graphs and to use
> SKYPE as required by them. Except for a Java developers toolkit that I had
> to install to help with development testing once, (which I uninstalled) and
> the myriad of crap software that came free with the computer, that is all that
> has ever been installed that I am aware of. 
> 
>  I did recently, becouse of this, install startup cop to see what might
> be starting up on bootups. (at least non services wize) I uninstalled a few
> other items that I knew I would never used and disabled those that looked odd.
> But still.. the pings go out about once or twice a day.
> 
>  I have not had a chance to turn off skype to see if that is what is
> doing it. But it is in no way connected to talking via skype. But why on earth
> would skpe send out these random pings all over the globe?
> 
>  
>  Thanks!
> 
> 
>   Nicole
>