[linux-help] Re: Port 18593 attacks

["Jonathan Hall" <flimzy@xxxxxxxxxx>]

> Sandy asked if you were able to determine who is port scanning you or
> what isp they are using.  If it is one of cox's customers, then she
> needs to find out and cox will go after them, suspending their service

Well he pasted several IPs.  It should be easy for anyone at Cox (or
anywhere at all, for that matter) to determine if they are Cox customers.

I looked up just a few here:

24.167.87.199    cs2416787-199.houston.rr.com
24.167.68.48    cs2416768-48.houston.rr.com
68.113.250.214    c68.113.250.214.ona.wi.charter.com
68.47.163.14    pcp01626435pcs.westk01.tn.comcast.net

A superficial observation suggests that these four IPs are from Texas,
Texas, Wisconsin, and Tennesee, respectively, and are not customers of Cox.


> send them to abuse@xxxxxxx.  Apparently asking people to be nice on the
> internet doesn't work, going after them legally (if enough evidence can
> be gathered and presented in court) is going to be the only way to stop
> the deviant computer users.  ~Anne

That's assuming these ARE deviant computer users.  A more likely explanation
is generally a virus/trojan-infected computer, as I suggested in an earlier
e-mail.

-- Jonathan

-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi