Re: Port 18593 attacks
bbales <[email protected]> Tue, 3 Aug 2004 21:23:10 -0500
| Newsgroups | gmane.org.user-groups.aclug.linux-help |
|---|---|
| Message-ID | <[email protected]> |
Anne, Sorry I didn't answer your email. I did do as you suggested and sent a=20 59KByte message to [email protected] I got their answer just a few minutes = ago. =20 Their answer was basically, "None of the messages originated from cox.net= so=20 we can't help." =20 Yes your help was valued. Thank you. Sorry I didn't say so earlier, but= I=20 had several things to try and neglected to report on all of them. By the= =20 way, nothing has changed. bruce On Tuesday 03 August 2004 20:56, you wrote: > Let me remind you....I am telling the group what the Security person at > Cox said to do...it isn't my idea...do whatever you want with the > information. I was just trying to help and apparently my help isn't > valued. ~Anne > > Jonathan Hall wrote: > >>Sandy asked if you were able to determine who is port scanning you or > >>what isp they are using. If it is one of cox's customers, then she > >>needs to find out and cox will go after them, suspending their servic= e > > > > Well he pasted several IPs. It should be easy for anyone at Cox (or > > anywhere at all, for that matter) to determine if they are Cox custom= ers. > > > > I looked up just a few here: > > > > 24.167.87.199 cs2416787-199.houston.rr.com > > 24.167.68.48 cs2416768-48.houston.rr.com > > 68.113.250.214 c68.113.250.214.ona.wi.charter.com > > 68.47.163.14 pcp01626435pcs.westk01.tn.comcast.net > > > > A superficial observation suggests that these four IPs are from Texas= , > > Texas, Wisconsin, and Tennesee, respectively, and are not customers o= f > > Cox. > > > >>send them to [email protected] Apparently asking people to be nice on t= he > >>internet doesn't work, going after them legally (if enough evidence c= an > >>be gathered and presented in court) is going to be the only way to st= op > >>the deviant computer users. ~Anne > > > > That's assuming these ARE deviant computer users. A more likely > > explanation is generally a virus/trojan-infected computer, as I sugge= sted > > in an earlier e-mail. > > > > -- Jonathan > > > > -- This is the [email protected] list. To unsubscribe, > > visit http://www.complete.org/cgi-bin/listargate-aclug.cgi > > -- This is the [email protected] list. To unsubscribe, > visit http://www.complete.org/cgi-bin/listargate-aclug.cgi -- This is the [email protected] list. To unsubscribe, visit http://www.complete.org/cgi-bin/listargate-aclug.cgi