Re: Port 18593 attacks

ironrose <[email protected]> Tue, 03 Aug 2004 20:56:35 -0500
Newsgroups gmane.org.user-groups.aclug.linux-help
Message-ID <[email protected]>
Let me remind you....I am telling the group what the Security person at=20
Cox said to do...it isn't my idea...do whatever you want with the=20
information.  I was just trying to help and apparently my help isn't=20
valued.  ~Anne

Jonathan Hall wrote:
>>Sandy asked if you were able to determine who is port scanning you or
>>what isp they are using.  If it is one of cox's customers, then she
>>needs to find out and cox will go after them, suspending their service
>=20
>=20
> Well he pasted several IPs.  It should be easy for anyone at Cox (or
> anywhere at all, for that matter) to determine if they are Cox customer=
s.
>=20
> I looked up just a few here:
>=20
> 24.167.87.199    cs2416787-199.houston.rr.com
> 24.167.68.48    cs2416768-48.houston.rr.com
> 68.113.250.214    c68.113.250.214.ona.wi.charter.com
> 68.47.163.14    pcp01626435pcs.westk01.tn.comcast.net
>=20
> A superficial observation suggests that these four IPs are from Texas,
> Texas, Wisconsin, and Tennesee, respectively, and are not customers of =
Cox.
>=20
>=20
>=20
>>send them to [email protected]  Apparently asking people to be nice on the
>>internet doesn't work, going after them legally (if enough evidence can
>>be gathered and presented in court) is going to be the only way to stop
>>the deviant computer users.  ~Anne
>=20
>=20
> That's assuming these ARE deviant computer users.  A more likely explan=
ation
> is generally a virus/trojan-infected computer, as I suggested in an ear=
lier
> e-mail.
>=20
> -- Jonathan
>=20
> -- This is the [email protected] list.  To unsubscribe,
> visit http://www.complete.org/cgi-bin/listargate-aclug.cgi
>=20
>=20
-- This is the [email protected] list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi