RE: Really odd pings going out

18 Oct 2005

      Doesn't look very odd to me, it's a very specific, rotating sequence..

204.152.43.107
130.244.175.141
202.139.21.27
202.232.175.9
Then back to .107,.141,.27,.9 ad nauseum..

Something on your laptop is trying to a. call home, b. find the best way
home, c. who knows..

Kill processes until it goes away and then go.. aha!

Peter Kranz
pkranz@unwiredltd.com

-----Original Message-----
From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of
Nicole
Sent: Tuesday, October 18, 2005 5:02 PM
To: nanog@nanog.org
Subject: Really odd pings going out

 Hello All.
  I have seen people writing in now and again with things like this and I
never
thought I would be one of them. But here goes.

 After doing a netgear firewall upgrade which suplpied some extra
information,
I started noticing these odd pings to all over the place from a computer I
have.
I don't notce any attempted return traffic from the same Ip's. So I am
at a loss as to what this could be or why. Any thoughts would be
appreciated.

- Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:204.152.43.107,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:130.244.175.141,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.139.21.27,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:27 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.232.175.9,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:28 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:29 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 01:10:30 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:151.164.243.2,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:204.152.167.33,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:130.244.203.3,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.139.215.213,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 16:11:02 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:202.232.11.117,[Type:8],WAN [Forward] - [Outbound Default rule
match]
Mon, 2005-10-17 16:11:04 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 16:11:05 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default
rule
match]
Mon, 2005-10-17 16:11:06 - ICMP packet - Source:192.168.1.3,[Echo
Request],LAN
- Destination:151.164.240.134,[Type:8],WAN [Forward] - [Outbound Default
rule
match]

 Its a dell computer supplied to me by my employer that I use for 2
purposes. I installed firefox for keeping an eye on our MRTG graphs and to
use
SKYPE as required by them. Except for a Java developers toolkit that I had
to install to help with development testing once, (which I uninstalled) and
the myriad of crap software that came free with the computer, that is all
that
has ever been installed that I am aware of. 

 I did recently, becouse of this, install startup cop to see what might
be starting up on bootups. (at least non services wize) I uninstalled a few
other items that I knew I would never used and disabled those that looked
odd.
But still.. the pings go out about once or twice a day.

 I have not had a chance to turn off skype to see if that is what is
doing it. But it is in no way connected to talking via skype. But why on
earth
would skpe send out these random pings all over the globe?

 Thanks!

  Nicole