Tracing a broadcast on our network

Unanswered Question
Jan 14th, 2010
User Badges:

We're regularly getting an intrusion detection message from our virus guard, broadcasting on 10.5.3.255. You can actually ping this address and get a reply of a proper ip address (although this keeps changing, one minute its that of a network printer, the next its something else). I'm guessing some little blighter is temporarily connecting to our network.

Any hints for tracking down/blocking this as and when the broadcast happens?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Ganesh Hariharan Fri, 01/15/2010 - 02:30
User Badges:
  • Purple, 4500 points or more
  • Community Spotlight Award,

    Member's Choice, February 2016

Hi Steve,


As per the problem and observation by you in your network it can that one of the desktops / devices got infected with some malware and it is spoofing the address of the LAN and attacking on the server that why you are getting ip address and are getting blocked in server due antivirus installed in the server.


In order to resolve this i would recommend you to scan the desktops with latest antivirus patch.


Hope that clear out your query,If commenst was helpsful do rate the post.


Regards

Ganesh.H

Actions

This Discussion