Re: XP Attack

From: Robert Michon (rob_michon_at_hotmail.com)
Date: 06/30/03


Date: Sun, 29 Jun 2003 21:45:09 -0400


You can always file a complaint with the ISP of the person whose machine the
attack originated from. Be sure to send specifics of the attack as you
posted here along with any supporting log files.

To find out who the ISP or owner of the IP is, and possibly get contact
information, go to the website below and enter the IP in the field at the
top right of the page and click Search Whois.

http://www.arin.net/index.html

-- 
Bob Michon
Associate Expert
Expert Zone---http://microsoft.com/windowsxp/expertzone/default.asp
___
"Nick" <npwMa@yahoo.com> wrote in message
news:054a01c33e4a$d36d6610$a501280a@phx.gbl...
> Recently my XP Pro PC got several attacks from 224.0.0.22
> (IGMP.MCAST.NET). One attack is to change %windows%
> \explorer.exe. Another one is to change %WINDOWS%
> \PCHEALTH\HELPCTR\Binaries\pch*.dll files. Would anyone
> please tell me how should I deal with the issue? Is
> IGMP.MCAST.NET a well-known attack machine? Who owns this
> machine?
> Thank you.
> Nick
>


Relevant Pages

  • Re: Question about rsync
    ... server, through your switches and gateways on to your ISP, through the ... internet infrastructure, and back out at the other side" ... methodof attack as you. ... - the idea that you *always* need strong encryption for any transfer can ...
    (comp.os.linux.networking)
  • Re: Web site being attacked!
    ... My advice is to contact the ISP that owns the IP address of the attacker ... block the attacks, until the attack patterns change again. ... Yes, you want "IISlockdown" which contains URLscan, install all microsoft ... The Netscreen 5XP is a real commercial grade firewall with the same features ...
    (microsoft.public.win2000.security)
  • Re: Dealing with script kiddies
    ... If I get a repeated attack ... and if I'm pissed because the bagel place was out of garlic ... >> to law enforcement networks, including the FBI, so I can let the ISP ... > security, not the technical side, so I'm not always _au courant_ with the ...
    (microsoft.public.inetserver.iis.security)
  • Re: Dealing with script kiddies
    ... If I get a repeated attack ... and if I'm pissed because the bagel place was out of garlic ... >> to law enforcement networks, including the FBI, so I can let the ISP ... > security, not the technical side, so I'm not always _au courant_ with the ...
    (microsoft.public.win2000.security)
  • RE: Disassembling botnets
    ... Well it isn't your job to disable the botnet and close down irc servers. ... ISP hosting the IRC network. ... little further into the attack source. ... I found the DNS name of the IRC server ...
    (Incidents)