[Dshield] Lots 'n' Lots of attacks...

Evans, TJ tjevans at kpmg.com
Tue Oct 2 15:16:11 GMT 2001


Well .. if you drop that IP into a browser it takes you to "HackerWhacker"
... and it appears to allow users to run a portscan from their site.


Thanks!
TJ

 -----Original Message-----
From: 	pop.ntlworld.com [mailto:lazerfx at ntlworld.com] 
Sent:	Tuesday, October 02, 2001 8:57 AM
To:	dshield at dshield.org
Subject:	[Dshield] Lots 'n' Lots of attacks...

I have been recently going through my ZoneAlarm logs, trying to work out why
it is suddenly 400KB+.  I have found thousands of entries from
208.179.251.103.  I have done a whois on this server, but found no relevant
information (Though I could be wrong, I'm not 100% sure what relevent
information would look like :P).

What should I do know?  I have submitted to DShield, has that covered it?
Or is there something I can do myself?  Is there a way of finding out who
208.179.251.103 actually is?

Thanks,

Peter Street
Web Developer
LazerFX Productions
www.lazerfx.co.uk (Just working on the XML and XSLT, then it will be live)

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/dshield
*****************************************************************************
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. 

If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter.         
*****************************************************************************




More information about the list mailing list