[NTLUG:Discuss] who is this 24.14.77.8
Mark Bickel
eusmb at exu.ericsson.se
Fri Jun 8 10:49:00 CDT 2001
> From discuss-admin at ntlug.org Fri Jun 8 10:28 CDT 2001
> From: "George E. Lass" <George.Lass at osc.com>
> To: discuss at ntlug.org
> Subject: Re: [NTLUG:Discuss] who is this 24.14.77.8
> Date: Fri, 08 Jun 2001 10:30:05 -0500
>
> Why not "report" that IP address to @ home. I'd have to guess that
> what it is doing is against their acceptable usage policies....
Looks like this may be a UDP packet DoS flood from a "bot" running on an infected
Windoze machine. Unlikely that the owner of the PC is aware of the infection.
If the PC's owner runs netstat from a DOS command prompt he/she might likely find
TCP connections established at ports 6667 (irc) and/or 113 (ident).
Good luck w/ @home. I doubt that you will find them to be at all helpful.
Mark.Bickel at ericsson.com
George wrote:
>
> m m wrote:
> >
> > Hi all:
> > I got this guy try to 'hack me for more than weeks, does any know this guy.
> > I check with whois at arin.net, it says belong to at&t @ home.
> > i wonder it is them that monitoring their customers
More information about the Discuss
mailing list