Thanks folks for all the info. I ended up just blocking via my IOS software
on my cisco 2501. I want to correct one thing incase anyone else wants to
block in advance as I made a typo on that IP address. The actual IP address
is 212.109.142.99 and it resolves to qrool.iz.wsp.zgora.pl
Thanks in Advance,
Eddie Strohmier
Bonwell Globalnet
www.bonwell.com
----- Original Message -----
From: Juha Saarinen <[EMAIL PROTECTED]>
To: Eddie Strohmier <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, April 26, 2000 3:55 PM
Subject: RE: portsentry...
> %-> address, (219.109.142.99)
>
> Arin says that that's not an allocated IP addresss... spoofed?
>
> %-> but now the @#&tard is sending me udp packets every second to port 7,
>
> That could be a fraggle attempt. He's sending lots of UDP packets to the
> echo port, in the hope of making your machine generate lots of traffic to
> create a DoS attack. There are CERT advisories about that, and rootshell
has
> the code for all the script kiddies to download...
>
> If you can track the runt down, report him to his ISP.
>
>
> -- Juha
>
>
>
> --
> To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
> as the Subject.
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
