IP question???

[JC]

I am always getting an alert on my firewall trom this IP 216.52.240.2 like 10 times in a few hours. What does this mean can I stop it??? Its Pi**ing me off. thx

[Matt615]

what kind of alert is it. Is it a ping or a port scan????

[JC]

acording to the information the firewall gave me I believe it was a port scan.

[Bouncer]

Contact the following people:

Miller Media & Imaging
2401 West Olive
Burbank, CA 91506
US
Coordinator: Operations Center, InterNAP Network noc@INTERNAP.COM (206)-256-9500 (FAX) (206)-256-9580

Understand that you are contacting the ISP, and not the end user.

Have your firewall logs handy and be preparred to send them via email if requested. Tell them that whoever is using the machine that has 216.52.240.2 as their address is port scanning you and may constitute a security breach on their clients part. Be polite, but do point out that you will take steps to contact the client directly if necessary. The client would probably rather hear this from their ISP than some person from out of nowhere. Mention that if you do have to contact the client directly you will mention that you attempted to inform their ISP of the security issue but that the ISP wasn't interested (apparently) in protecting their clients security from malicious intruders.

That should get a reaction. :) But be polite about it, and do give the ISP a reasonable chance to address the issue first.

Regards,
-Bouncer-

[JC]

Thanks for the information and advice bouncer. I spoke with them and they told me to send the logs (just as you stated) They will look into the problem. thx

[Brent]

sweet, sounds like a resolution :)

Also, moving this thread to Computer Security forum