[Coco] Someone trying to ftp

[Bob Devries]

Benoit Bleau said:

> In you case, 218.67.245.189 is from the following ISP:

If you look further down the whois output, you'll see that the particular IP 
number given isn't allocated. This makes me think that the IP number may be 
spoofed.

--
Regards, Bob Devries, Dalby, Queensland, Australia

Isaiah 50:4 The sovereign Lord has given me
the capacity to be his spokesman,
so that I know how to help the weary.

website: http://www.home.gil.com.au/~bdevasl
my blog: http://bdevries.invigorated.org/

----- Original Message ----- 
From: "Benoit Bleau" <benbleau at gmail.com>
To: "CoCoList for Color Computer Enthusiasts" <coco at maltedmedia.com>
Sent: Tuesday, November 13, 2007 9:25 AM
Subject: Re: [Coco] Someone trying to ftp


> Kevin Diggs wrote:
>>
>> P.S.:  Someone from 218.67.245.189 is tryin' to ftp into my computer. How 
>> do I find out who this is? (89.43.124.254 too!)
>>
>>
> You can use WHOIS to find this out, then you can report the abuse the the 
> ISP's admins.
>
> I use http://www.arin.net/whois/ to find out.
>
>
>    OrgName:    Asia Pacific Network Information Centre OrgID:      APNIC 
> <http://ws.arin.net/whois/?queryinput=O%20%21%20APNIC>
>    Address:    PO Box 2131
>    City:       Milton
>    StateProv:  QLD
>    PostalCode: 4064
>    Country:    AU
>
> And the abuse http is: http://www.apnic.net/info/faq/abuse.
>
> The other one, 89.43.124.254 is:
>
>    OrgName:    RIPE Network Coordination Centre OrgID:      RIPE 
> <http://ws.arin.net/whois/?queryinput=O%20%21%20RIPE>
>    Address:    P.O. Box 10096
>    City:       Amsterdam
>    StateProv:  PostalCode: 1001EB
>    Country:    NL
>
> No abuse/admin registered.
>
> Usually these would be hijacked computers, and the owners don't even know 
> about it. Reporting them to the ISP *might* help, though.
>
> -Benoit
>
>
>
> --
> Coco mailing list
> Coco at maltedmedia.com
> http://five.pairlist.net/mailman/listinfo/coco