To the Terrorist

[Phats]

[You must be logged in to view images. Log in or Register.]

[Tiggles]

Originally Posted by Basil67 [You must be logged in to view images. Log in or Register.]

Sure, take out his IP's.

67.205.76.148

75.144.216.121

Originally Posted by Phats [You must be logged in to view images. Log in or Register.]

Well, 67.205.76.148 is definately the Sleeper it just took me to the website

The second IP was given to me by a source as well.

[Lopretni]

It's also entirely possible that it's a red herring, as unlikely as it might seem. Best not to pull the trigger until there's no doubt.

[Tiggles]

Originally Posted by Lopretni [You must be logged in to view images. Log in or Register.]

It's also entirely possible that it's a red herring, as unlikely as it might seem. Best not to pull the trigger until there's no doubt.

I agree 100%

I was given this screenshot

[You must be logged in to view images. Log in or Register.]


Can anyone tell me what any of it means?

[citizen1080]

Detective Tiggles on the case! <3

[t0lkien]

I'm no expert, but that *looks* like a short record of packets spammed at presumably the p99 server from 64.94.160.4 containing the (what looks like random) crap listed in the bottom frame.

That IP resolves to a Typefrag server, and 67.205.76.148 - the other IP involved there - resolves to Epic Emu homepage as someone said above. Curiouser and curiouser.

We could contact Typefrag and alert them to the fact that it looks like someone is using their server to launch a DDoS attack.

[Tiggles]

Originally Posted by t0lkien [You must be logged in to view images. Log in or Register.]

I'm no expert, but that *looks* like a short record of packets spammed at presumably the p99 server from 64.94.160.4 containing the (what looks like random crap) listed in the bottom frame.

That IP resolves to a Typefrag server...

Can we get a port to it?

[Tiggles]

Originally Posted by Tiggles [You must be logged in to view images. Log in or Register.]

Can we get a port to it?

It will probably lead to a mumble server....

[Feralspec]

stahp this

[t0lkien]

It looks like the source port is 7118 for UDP and 22284 for TCP. But anyone DDoSing would be using many IPs obviously, so I'm not really sure what all this proves or shows.