Prot probes

yeah - the port scanning on Cox ip ranges is rather severe and apparently
Cox makes no effort to police the activity. When I see that happening, I try
to nslookup and complain to abuse@whateverdomain but often little is done.

Craig

----:----|----:----|----:----|----:----|----:----|----:----|
- Craig White - PO Box 8634 - Scottsdale, Arizona - 85252
- e-mail address ................ - CraigWhite@AzApple.com
- world wide web address ........ - http://www.AzApple.com
- e-mail my pager address ....... - 6023779752@airtouch.net
- cellular phone ................ - (602) 377-9752
- voice/facsimile ............... - (480) 945-8445
----:----|----:----|----:----|----:----|----:----|----:----|

> -----Original Message-----
> From: plug-discuss-admin@lists.plug.phoenix.az.us
> [mailto:plug-discuss-admin@lists.plug.phoenix.az.us]On Behalf Of
> sinck@owmyeye.ugive.com
> Sent: Friday, July 07, 2000 7:53 AM
> To: plug-discuss@lists.plug.phoenix.az.us
> Subject: Prot probes
>
>
>
>
> \_ I have just got everything up with @home this past weekend. I am so
> \_ glad. I check my firewall every night to see what is going on. In
> \_ my log file have started to see a pattern to some probes. I seem to
> \_ get a lot from Cox at home and Cox at work.
>
> This is a bit severe, but try:
>
> ipchains -A input -j REJECT -p tcp 24.0.0.0/8 -y -d <your-ip> 0:65535
>
> That'll definitely mask off those annoying cox@ probes. As well as a
> whole host of other folks, but why are they trying to see your box
> anyway? :-)
>
> IIRC, some dig'ing found that cox went 24.1 - 24.14 a while back.
>
> David
>
> _______________________________________________
> Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss