Re: Port 18593 attacks

"Jonathan Hall" <[email protected]> Mon, 2 Aug 2004 23:40:07 -0500
Newsgroups gmane.org.user-groups.aclug.linux-help
Message-ID <000f01c47914$0c061ad0$0202000a@tirian>
> Sandy asked if you were able to determine who is port scanning you or
> what isp they are using.  If it is one of cox's customers, then she
> needs to find out and cox will go after them, suspending their service

Well he pasted several IPs.  It should be easy for anyone at Cox (or
anywhere at all, for that matter) to determine if they are Cox customers.

I looked up just a few here:

24.167.87.199    cs2416787-199.houston.rr.com
24.167.68.48    cs2416768-48.houston.rr.com
68.113.250.214    c68.113.250.214.ona.wi.charter.com
68.47.163.14    pcp01626435pcs.westk01.tn.comcast.net

A superficial observation suggests that these four IPs are from Texas,
Texas, Wisconsin, and Tennesee, respectively, and are not customers of Co=
x.


> send them to [email protected]  Apparently asking people to be nice on the
> internet doesn't work, going after them legally (if enough evidence can
> be gathered and presented in court) is going to be the only way to stop
> the deviant computer users.  ~Anne

That's assuming these ARE deviant computer users.  A more likely explanat=
ion
is generally a virus/trojan-infected computer, as I suggested in an earli=
er
e-mail.

-- Jonathan

-- This is the [email protected] list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi