[linux-help] Re: Port 18593 attacks

[ironrose <ironrose@xxxxxxx>]

Let me remind you....I am telling the group what the Security person at 
Cox said to do...it isn't my idea...do whatever you want with the 
information.  I was just trying to help and apparently my help isn't 
valued.  ~Anne

Jonathan Hall wrote:
>>Sandy asked if you were able to determine who is port scanning you or
>>what isp they are using.  If it is one of cox's customers, then she
>>needs to find out and cox will go after them, suspending their service
> 
> 
> Well he pasted several IPs.  It should be easy for anyone at Cox (or
> anywhere at all, for that matter) to determine if they are Cox customers.
> 
> I looked up just a few here:
> 
> 24.167.87.199    cs2416787-199.houston.rr.com
> 24.167.68.48    cs2416768-48.houston.rr.com
> 68.113.250.214    c68.113.250.214.ona.wi.charter.com
> 68.47.163.14    pcp01626435pcs.westk01.tn.comcast.net
> 
> A superficial observation suggests that these four IPs are from Texas,
> Texas, Wisconsin, and Tennesee, respectively, and are not customers of Cox.
> 
> 
> 
>>send them to abuse@xxxxxxx.  Apparently asking people to be nice on the
>>internet doesn't work, going after them legally (if enough evidence can
>>be gathered and presented in court) is going to be the only way to stop
>>the deviant computer users.  ~Anne
> 
> 
> That's assuming these ARE deviant computer users.  A more likely explanation
> is generally a virus/trojan-infected computer, as I suggested in an earlier
> e-mail.
> 
> -- Jonathan
> 
> -- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
> visit http://www.complete.org/cgi-bin/listargate-aclug.cgi
> 
> 
-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://www.complete.org/cgi-bin/listargate-aclug.cgi