| From: | Paul Ferguson |
| Date: | 25 Jun 2001 at 21:57:28 |
| Subject: | Re: Internet Abuse and Port Hacks |
Hi Craig,
On 25-Jun-01, Craig_Daines@excite.co.uk wrote:
> I am experiencing illegal ports opening via Miami.
Which ports ? Port numbers would help here....
> I have turned on logging, and
> am using syslog.library to collect evidence to pass to my ISP, as well
> as scanning ports that are opened using GoPortScan to obtain service
> information of ports opened.
Fair enough
> What is the best thing to do in the event of abuse? I have passed the
> logs onto my ISP and the ISP's of the hosts concerned, so hopefully
> I've done the right thing 8)
If it was me I'd be checking which ports are being opened and then
researching what those ports are for. Are you talking about a sustained
attack or ports that are being probed by (for example) Napster ? It
could be that (assuming you have a dynamic IP address) that a program
is trying to connect to the IP address that was used by a previous user
as a Napster server IYSWIM
> Q1)
> Does anyone have the e-mail address for contacting AOL Internet to
> report abuse of (port attacks)? This one I still need to look up 8(
AOL ? Forget it - they don't take any notice from what I've heard
(standing by to get flamed ;)
> Q2)
> Some networks administrator information is not listed on some
> networks. How do you go about looking them up?
Example please ?
*Paul Ferguson* running Amiga and PC in total harmony...I wish ;)
Why do they call it a TV set when you only get one?
Quote carefully and read all ADMIN:README mails
To unsubscribe mailto:amigactive-unsubscribe@yahoogroups.com
Anyone sending unsubscribe messages to the list will be SHOT!
Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/