Re: Identifying a computer

["gregh" <chows () ozemail com au>]

----- Original Message ----- 
From: "Cheetah" <cheetahx () online no>
To: <security-basics () securityfocus com>
Sent: Thursday, December 04, 2003 2:38 AM
Subject: Identifying a computer
> Is there any way I can get some information out of this computer without
> running around
> and asking everyone what their IP is?

Just a thought - why not bar access to the IP number in question totally for
anything at all. If it is someone within your organisation who SHOULD have
access and they start complaining they have NONE, then you can go see what
is on their machine. If it isn't someone within your organisation, you wont
get complaints and your bandwidth will only be soaked up if it is actually a
DOS I guess.

My bet is someone has a trojan on their computer and it is being used to
route spam through it.

Greg.




---------------------------------------------------------------------------
----------------------------------------------------------------------------