To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- On Thu, 7 Dec 2006, Pagnozzi Sergio wrote: > > >Help me understand: > >This is an attack on your network, coming from many IPs in the world to a > >single >IP address in your network? > > >This is an attack coming from your network, going from many machines to a > >signle >IP address in someone else's network? > > Well... I don't know exactly what's up on my network... I can see massive dns > A/AAAA query to my DNS server both from ITZ and my internal host... This > happen in determinated period... From 9 to 12 AM and from 2 to 20 PM i'ts 2 > day long that we can see that..
Can you upload a packet capture somewhere? > > > > -- > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.0.409 / Virus Database: 268.15.14/578 - Release Date: 07/12/2006 > > -------------------------------------------------------------------- > > CONFIDENTIALITY NOTICE > > This message and its attachments are addressed solely to the persons above > and may contain confidential information. If you have received the message in > error, be informed that any use of the content hereof is prohibited. Please > return it immediately to the sender and delete the message. Should you have > any questions, please contact us by replying to [EMAIL PROTECTED] > > Thank you > > www.telecomitalia.it > > -------------------------------------------------------------------- > > _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
