|
|
Trojan attack alert???
|
|
|
|
Submitted by Artamos on Sat, 2005-08-06 06:08
|
|
Every time I log on to the STD IRC channel I get this Trojan alert??
OrgID: C00893996
CustName: 800 Pound Gorilla (formerly BTEG Network)
Street: PO Box 800965
City: Valencia
StateProv: CA
Country: US
PostalCode: 91355
RegDate: 2004-08-25
Updated: 2004-08-25
NetHandle: NET-64-71-165-192-1
OrgID: C00893996
Parent: NET-64-71-128-0-1
NetName: HURRICANE-CE0112-4711
NetRange: 64.71.165.192 - 64.71.165.223
NetType: reassignment
RegDate: 2004-08-25
Updated: 2004-08-25
Can somebody explain this to me??
Thanks in advance.. :oops: |
|
|
|
Found something via Google - advice given, viz;
Send an e-mail to both owners of that IP range:
Subject line: Abuse Report 64.71.165.192
Advise network owner(s) that IP address 64.71.165.192 is being used to scan your IP address xx.xx.xx.xx. Include the dates, times and ports scanned.
Paste into the e-mail the firewall logs that show the date, time, source IP address and port and your IP address and port(s). (Do not attach a file! They will think its a virus and delete the whole thing.)
Ask why this customer's IP address is scanning your system and ask if it is infected with some virus.
The IP address range belongs to what appears to be a local Internet Service Provider in Fremont CA, 94539 who has about 16,000 IP addresses. The one causing you problems as you know is Reassigned to the BTEG Network in Valencia CA, 91255.
They will have records of what customer actually uses that IP address and should be able to address the problem with them for you.
A check of a world wide data base from over 30,000 routers and systems that log and report such probes, shows that in the last 30 days none (0) such scans have been detected from IP address 64.71.165.192. So this might actually be a directed attack as opposed to just some virus/worm/trojan infection.
..any use? 8O
Thanks mate...
i think it is gamesurge scanning you for trojans, there was info about it on the gamesurge.net site but i can't find it anymore