I have the same type of attack on a different ip
here are the details
IP: 209.86.142.68
DNS: user-38ld3i4.dialup.mindspring.com
Node: BOXOFWIRES
Group: STUDENTS
MAC: 444553540000
back orifice ping
----- Original Message -----
From: "A V Flinsch" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, October 10, 2000 8:07 PM
Subject: Re: [newbie] trojan horses
> On Tue, 10 Oct 2000, you wrote:
> > I went to http://boxnetwork.net on mistake--there was a black page with
a
> > hand with an eye on it, and no links. Do you happen to know what that
> > page is?
>
> [alex@homer alex]$ ping boxnetwork.net
> PING boxnetwork.net (194.1.129.227): 56 data bytes
> 64 bytes from 194.1.129.227: icmp_seq=0 ttl=235 time=1069.5 ms
>
> [alex@homer alex]$ ping www.boxnetwork.net
> PING www.boxnetwork.net (194.1.129.227): 56 data bytes
> 64 bytes from 194.1.129.227: icmp_seq=0 ttl=235 time=740.2 ms
>
> Same machine, just that thye have Apache set up to return a different page
for
> boxnetwork.net, than is returned for www.boxnetwork.net
>
> --
> Alex
> (Go easy on me, I'm a COBOL programmer in real life)
>
>
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.198 / Virus Database: 95 - Release Date: 10/4/00
