To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- Mark Armitage wrote: > Hi John, > I'm curious, do you know if > we these real IP's 'owned machines' or spoofed source IP's ? > Real Connections or just SYN's other flooded frames ? > > Mark Armitage. There is a very high probability they are owned machines part of a large botnet. Spoofed IP's are possible, but only if the upstream routers get hacked and owned to allow the hacker to make their OWN IP block out of unused IP's, but this is rare.
John _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
