[unisog] 10.10.10.10:36278

Phillip G Deneault deneault at WPI.EDU
Mon Feb 23 15:28:47 GMT 2004


> It's interesting to note that today, we noticed traffic going to 10.0.1.128
> also.  That IP seems to be triggered by a version of Gaobot that attempts to
> reach lar.ath.cx, which resolves to 10.0.1.128.
> 
> Paul
> -- 
> Paul Dokas                                            dokas at cs.umn.edu
> ======================================================================
> Don Juan Matus:  "an enigma wrapped in mystery wrapped in a tortilla."
> 

I've noticed this traffic also.  Today I'll generate a list of machine 
with this traffic and see if I can tie it down to something in 
particular.

Phil

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Phil Deneault     "We work in the dark, We do what we can,
deneault at wpi.edu   We give what we have. Our doubt is our passion,
WPI NetOps         and our passion is our task. The rest is the
InfoSec            madness of art." - Henry James
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-





More information about the unisog mailing list