On Mon, 10 Nov 2003 19:59, you wrote: > Hi there > > I write to the list out for advise. Over the past couple of weeks I > noticed one IP address popping up in my IPCop logs an awful lot. I've > contacted the ISP whose netblock it belongs to, and they have told me the > sublease it to another company in Wellington. No problem, I contact them. > I get a responce telling me they will look into it. I've grep-ed the log > so they only see the relivant IP addresses entries but I feel I'm gettig > nowhere. In fact, after grep-ing today's log into one file, I find over > 6500 entries for today!!!! Where do I go from here? Obviously I'm paying > for the traffic (thanks Telecom!) and I'd quite like it to stop. > > Suggestions will be greatly appreciated.
What are the details? Not port 135 perchance? I had a load of this sort of nonsense a while ago, and wrote to the abuse@ address of my ISP, the offending packets were from a local i.p. number, and wrote a very polite yet clearly worded letter stating that if the almost continuous port scanning on my machine did not stop immediately I would be taking the matter up with the police, and that a member of the ISP's staff would be subpoenaed to provide the evidence as to which of their clients was the malevolent party. The problems stopped immediately. Now that the NZ laws about computer cracking have been beefed up you will be able to get this stopped. Take care with the spelling and grammar in your e-mail and subsequent on paper correspondence. -- Sincerely etc. Christopher Sawtell NB. This PC runs Linux. If you find a virus apparently from me, it has forged the e-mail headers on someone else's machine. Please do not notify me when this occurs. Thanks.
