Re: Port 18593 attacks

bbales <[email protected]> Tue, 3 Aug 2004 21:23:10 -0500
Newsgroups gmane.org.user-groups.aclug.linux-help
Message-ID <[email protected]>
Anne,
Sorry I didn't answer your email.  I did do as you suggested and sent a=20
59KByte message to [email protected]  I got their answer just a few minutes =
ago. =20
Their answer was basically, "None of the messages originated from cox.net=
 so=20
we can't help." =20

Yes your help was valued.  Thank you.  Sorry I didn't say so earlier, but=
 I=20
had several things to try and neglected to report on all of them.  By the=
=20
way, nothing has changed.
bruce

On Tuesday 03 August 2004 20:56, you wrote:
> Let me remind you....I am telling the group what the Security person at
> Cox said to do...it isn't my idea...do whatever you want with the
> information.  I was just trying to help and apparently my help isn't
> valued.  ~Anne
>
> Jonathan Hall wrote:
> >>Sandy asked if you were able to determine who is port scanning you or
> >>what isp they are using.  If it is one of cox's customers, then she
> >>needs to find out and cox will go after them, suspending their servic=
e
> >
> > Well he pasted several IPs.  It should be easy for anyone at Cox (or
> > anywhere at all, for that matter) to determine if they are Cox custom=
ers.
> >
> > I looked up just a few here:
> >
> > 24.167.87.199    cs2416787-199.houston.rr.com
> > 24.167.68.48    cs2416768-48.houston.rr.com
> > 68.113.250.214    c68.113.250.214.ona.wi.charter.com
> > 68.47.163.14    pcp01626435pcs.westk01.tn.comcast.net
> >
> > A superficial observation suggests that these four IPs are from Texas=
,
> > Texas, Wisconsin, and Tennesee, respectively, and are not customers o=
f
> > Cox.
> >
> >>send them to [email protected]  Apparently asking people to be nice on t=
he
> >>internet doesn't work, going after them legally (if enough evidence c=
an
> >>be gathered and presented in court) is going to be the only way to st=
op
> >>the deviant computer users.  ~Anne
> >
> > That's assuming these ARE deviant computer users.  A more likely
> > explanation is generally a virus/trojan-infected computer, as I sugge=
sted
> > in an earlier e-mail.
> >
> > -- Jonathan
> >
> > -- This is the [email protected] list.  To unsubscribe,
> > visit http://www.complete.org/cgi-bin/listargate-aclug.cgi
>
> -- This is the [email protected] list.  To unsubscribe,
> visit http://www.complete.org/cgi-bin/listargate-aclug.cgi

-- This is the [email protected] list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi