[ILUG] your account voiverwe

[James Cooper]

I had to disinfect a machine infected with the blaster worm.
It's all well and good saying "download and patch" but a worm
like this hogs your connection sending out stuff making the
download almost impossible. If this guy has a dial-up connection
he'll have some phone bill waiting for the patch to download.

-----Original Message-----
From: ilug-bounces at linux.ie [mailto:ilug-bounces at linux.ie] On Behalf Of
Daragh Mc Grath
Sent: 15 January 2004 14:35
To: Mark Webb
Cc: 'Breathnach, Proinnsias (Dublin)'; 'ilug at linux.ie'
Subject: Re: [ILUG] your account voiverwe

Mark Webb wrote:

> And by looking further in the headers:
> 
> 
>>Received: from p78-107.as1.crl.dublin.eircom.net ([159.134.78.107]  
>>       helo=localhost) by byron.heanet.ie with smtp (Exim 4.22)    
>>    id 1Agiby-000528-0n
>>       for ilug at linux.ie; Wed, 14 Jan 2004 10:51:02 +0000
> 
> 
> it seems to originate from an eircom ADSL subscriber.
> Had the mail been sent directly to me, I would have
> reported the abuse to eircom.

This is not a DSL customer, rather, a dial up customer in Crumlin.

> Does anyone in eircom respond to these reports?

Well, the abuse team log and follow up on each valid complaint sent to 
abuse at eircom.net, responses to these are not always sent though afaik.

> I keep receiving and blocking incoming requests
> from eircom ADSL users on TCP port 4444 (napster)
> and port 6346 (gnutella).

Part and parcel of internet life unfortunately, there's still a whole 
heap of novice (and even some not-so-novice) users out there infected 
with all of the best known / most publicised virus out in the wild.

> [Note: if you do get port scanned and want to report it,
>  please include the following information:
>  Source IP address, source port, protocol (e.g. UDP, TCP),
>  destination IP address, destination port, time.]

Agreed. I've forwarded this mail off to the abuse team for them to 
chase, if I get any more details back, I'll let you know.

-- 
Regards,
Daragh
http://www.daraghmcg.org

-- 
Irish Linux Users' Group
http://www.linux.ie/mailman/listinfo/ilug/