[NTLUG:Discuss] who is this 24.14.77.8

Mark Bickel eusmb at exu.ericsson.se
Fri Jun 8 10:49:00 CDT 2001


> From discuss-admin at ntlug.org Fri Jun  8 10:28 CDT 2001
> From: "George E. Lass" <George.Lass at osc.com>
> To: discuss at ntlug.org
> Subject: Re: [NTLUG:Discuss] who is this 24.14.77.8
> Date: Fri, 08 Jun 2001 10:30:05 -0500
> 
> Why not "report" that IP address to @ home.  I'd have to guess that
> what it is doing is against their acceptable usage policies....

Looks like this may be a UDP packet DoS flood from a "bot" running on an infected
Windoze machine. Unlikely that the owner of the PC is aware of the infection.
If the PC's owner runs netstat from a DOS command prompt he/she might likely find 
TCP connections established at ports 6667 (irc) and/or 113 (ident).

Good luck w/ @home. I doubt that you will find them to be at all helpful.

Mark.Bickel at ericsson.com 


George wrote:
> 
> m m wrote:
> > 
> > Hi all:
> > I got this guy try to 'hack me for more than weeks, does any know this guy.
> > I check with whois at arin.net, it says belong to at&t @ home.
> > i wonder it is them that monitoring their customers



More information about the Discuss mailing list