Rooted Boxes

["Christian W. Zuckschwerdt" <zany () TRIQ NET>]

Some machine in a subnet behind our IDS has been rooted and abused for
IRC-Clones etc.

The logs show interactive(!) telnet access to that box from these IP#'s

202.188.25.163  TMnet Telekom Malaysia
202.188.192.38  -"-
202.151.196.75  Maxis Communications Berhad ISP
203.121.68.161  TIME Telecommunications Sdn Bhd Kuala Lumpur
209.57.44.142   Verio, Inc.
210.225.29.163  Nippon Jimuki Union (Japan)
210.163.139.31  Speed Internet Inc. (Japan)

Are those dial-in boxes? If not is there any chance to contact the
owners?

  cu.
    :
    Christian