[Dshield] Blitznet?

Jeff Godin jeff at tcnet.org
Tue Sep 9 23:09:57 GMT 2003


On Tue, 9 Sep 2003, Tim Kroeger wrote:

> 14:36 03Sep09 from 123.456.9.178:23 123.456.13.185:3609 tcp BLITZNET
> 14:36 03Sep09 from 123.456.9.178:23 123.456.13.150:3609 tcp BLITZNET
[snip]
>
> This is a dial-up user who was also infected with Nachi.  We were
> logging this at the same time we were seeing Nachi from the same user.

It would help if you could specify what program/script/etc generated the
above output. There are quite a few interesting tools out there, and it is
difficult to recognize the output of each and every one without some
additional hints. :)

>
> I have found very little on Blitznet.  Is this Blitznet?

Google turns up quite a bit of information on at least one, possibly two
candidates... impossible to tell how relevant they are without more
information in the way of context... see above.

-jeff

-- 
Jeff Godin
Network Specialist
Traverse Area District Library / Traverse Community Network
jeff at tcnet.org




More information about the list mailing list