Re: FTP Attempts

1999-09-03 Thread Dave Gillett
On 2 Sep 99, at 17:22, Bill Fox wrote: Personally, I'd like to see more people get a bit more proactive in solving 'weird' log entries such as this. It could help a bit in clearing up a small of the 'net congestion. Quite often these types of 'transactions' are simply due to a misconfig

Re: FTP Attempts

1999-09-02 Thread Larry Chin
hmmm, doesn't respond to any connect attempts traceroute fails no registered hosts pings fail no DNS resolution Possiblities: - spoofing type of activity perhaps ? Nothing else except a misconfigured machine really springs to mind given that there doesn't seem to be any network path to the

Re: FTP Attempts

1999-09-02 Thread Paul D. Robertson
On Wed, 1 Sep 1999, Newcomb, Kelly wrote: I'm getting repeated (regular intervals) ftp attempts to my firewall from an address (208.24.82.140) that I can't seem to track down. While the attempts [whois.arin.net] Sprint (NETBLK-SPRINTLINK-BLKS) SPRINTLINK-BLKS 208.0.0.0 - 208.35.255.255

Re: FTP Attempts

1999-09-02 Thread Alejandro Hoyos
Could you share with us how you traced the IP address? That looks like a www.networksolutions.com type answer, but I'm not sure how to get it given the IP address. Thanks. --- Bill Fox [EMAIL PROTECTED] wrote: Hi, Perhaps a brief email or phone call to the coodinator (see below) may

Re: FTP Attempts

1999-09-02 Thread Joe Matusiewicz
At 06:17 AM 9/2/99 -0700, Alejandro Hoyos wrote: Could you share with us how you traced the IP address? That looks like a www.networksolutions.com type answer, but I'm not sure how to get it given the IP address. Thanks. Try http://mjhb.marina-del-rey.ca.us/cgi-bin/ipw.pl? - [To

Re: FTP Attempts

1999-09-02 Thread Larry Chin
go to www.arin.net query whois for the IP address click on the handle associated with the address space in this case NETBLK-SPRINT-D01840 :-) === Larry Chin {[EMAIL PROTECTED]} Technical Specialist - ISC Sprint Canada

Re: FTP Attempts

1999-09-02 Thread Paul D. Robertson
On Thu, 2 Sep 1999, Alejandro Hoyos wrote: Could you share with us how you traced the IP address? That looks like a www.networksolutions.com type answer, but I'm not sure how to get it given the IP address. Thanks. From a shell prompt - "whois [EMAIL PROTECTED]" Some whois clients want

Re: FTP Attempts

1999-09-02 Thread Dave Gillett
At 06:17 AM 9/2/99 -0700, Alejandro Hoyos wrote: Could you share with us how you traced the IP address? That looks like a www.networksolutions.com type answer, but I'm not sure how to get it given the IP address. Thanks. Try www.arin.com David G - [To unsubscribe, send mail to [EMAIL

Re: FTP Attempts

1999-09-02 Thread John Stewart
Try this tool: http://www.blighty.com/products/spade/ It leads you to a significant amount of information about a given IP address. Michael Stout wrote: Bill, How did you track down the coordinator for that particular IP address. We are hit numerous times by IP addresses that I would

RE: FTP Attempts

1999-09-02 Thread Sweeney, Patrick
, September 02, 1999 9:17 AM To: Bill Fox; Newcomb, Kelly; [EMAIL PROTECTED] Subject: Re: FTP Attempts Could you share with us how you traced the IP address? That looks like a www.networksolutions.com type answer, but I'm not sure how to get it given the IP address. Thanks. --- Bill Fox [EMAIL

Re: FTP Attempts

1999-09-01 Thread Bill Fox
Hi, Perhaps a brief email or phone call to the coodinator (see below) may help in resolving the issue (?). Good Luck! --Bill United States Internet, Inc (NETBLK-SPRINT-D01840) 1127 N Broadway Knoxville, TN 37917 US Netname: SPRINT-D01840 Netblock: 208.24.64.0 -