Mike,

It looks like the person is coming from ra218.isis.de.  It also looks like it has 
something to do with BBNPlanet.net, he is also going to gw.eni.net, which is 
mindspring.  I looked at the map and it states that it is starting in London.

Steven

NeoTrace  Version 2.12a - Shareware (2-1-2000) 
Destination: 195.158.132.218

-#--------------Node Name---------------IP 
Address------Location-----------RT*--High---Low---Avg-Tot---D
 1          ME
 2           10.16.2.1       Unknown            10   10   10   10  23   0
 3           10.16.2.1       Unknown             0   10    0    3  23   0
 4   206-40-200-85.     gw.eni.net 206.40.200.85   Unknown            10   10   10    
6  23   0
 5         fe11-0-0.irv-core.gw.eni.net 155.229.120.117 Unknown             0   10    
0    6  23   0
 6            h11-0.pao-core.gw.eni.net 155.229.120.9   37.442N,122.142W   20  331   
10   20  23   0
 7   a5-0-7.sanjose1-nbr1.bbnplanet.net 4.24.145.25     37.342N,121.883W   20   21   
10   20  23   0
 8     p1-0.sanjose1-nbr2.bbnplanet.net 4.0.5.86        37.342N,121.883W   20   30   
10   16  23   0
 9                        ra218.isis.de 195.158.132.218 51.217N,  6.767E     -    0    
0    0  44  44
--------------------------------------------------------------------------------------------------------
*All times in milliseconds (ms), D=Dropped packets
--------------------------------------------------------------------------------------------------------
February 17, 2000 16:17:28
NeoTrace Copyright �1997-1999 NeoWorx inc
http://www.neoworx.com



















*********** REPLY SEPARATOR  ***********NeoTrace  Version 2.12a - Shareware (2-1-2000) 
Destination: 195.158.132.218



On 2/17/2000 at 6:56 PM Michael E. Cummins wrote:

>Just curious.
>
>Someone is gently scanning me right now from 195.158.132.218 ; out of
>curiosity, I tried connecting to this IP on 21; 80; 119; etc. just to see if
>I would get any return info but was forcefully rejected on each attempt.
>They were initially scanning for (according to my firewall logs) Net-Bus PRO
>and backdoor G-1 connections.  Now that I have his IP and time of
>connection, what other information can I get about him so I can submit him
>to..  who?
>
>His ISP would be the most likely source to complain to, but how do I get
>that?  What other information can I acquire to help nail him down?
>
>Any advice on what step to take next?  Probably too late to help me catch
>this one but I suppose there will always be a "next" one!
>
>Thank you!
>
> ,_,
>(O,O)
>(   )
>-"-"---------------------------------------------------------------
>|      From the Desk of Michael E. Cummins                                     |
>|                                                                                     
> |
>|      WEBSITE:        http://www.i-magery.com                                 |
>|      E-MAIL: mailto:[EMAIL PROTECTED]                             |
>|                                                                                     
> |
>|      "The main thing is to keep the main thing, the main thing"      |
>|      - Albert Einstein                                                              
> |
>|                                                                                     
> |
>|      "Si hoc legere scis numium eruditionis habes"                   |
>-------------------------------------------------------------------
>
>
>====================================================
>And for you automated email spammers out there,
>here are the email addresses of the current board of
>the Federal Communications Commission:
>Chairman William Kennard: [EMAIL PROTECTED]
>Commissioner Susan Ness: [EMAIL PROTECTED]
>Commissioner Harold Furchtgott-Roth: [EMAIL PROTECTED]
>Commissioner Michael Powell: [EMAIL PROTECTED]
>Commissioner Gloria Tristani: [EMAIL PROTECTED]
>And let's help you send some spam to the USPS, too:
>[EMAIL PROTECTED]
>====================================================
>
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]



-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to