Re: Scans Observed by Officer Friendly

[kevin hunter <kevin_hunter () compusa com>]

> > Where would the address 24.93.46.49 be comming from?
> >
> > Is this an annoyance or a masqerade?
> >
> > My 'Officer' noticed BO_PING sweep and BO_FILEFIND attempts on Friday
> > night and Sunday night.
> >
> >
> > <><Randall Grimshaw, Network Programmer, Syracuse University, 315-443-5779


It could have been spoofed but the address is a dynamic IP for the ISP
rr.com in Austin Texas



Kevin Hunter
Internet Systems
CompUSA INC
Dallas, TX




Name:    cs9346-49.austin.rr.com
Address:  24.93.46.49

bash# whois rr.com
[rs.internic.net]

Registrant:
EXCALIBUR Group, A Time Warner Company (RR6-DOM)
   12001 Sunrise Valley Dr
   Reston, VA 20191
   US

   Domain Name: RR.COM

   Administrative Contact, Technical Contact, Zone Contact:
      Network Operations Center, Road Runner  (NO789-ORG)  abuse () RR COM
      (703) 345-3416
Fax- (703) 345-2517
   Billing Contact:
      Network Operations Center, Road Runner  (NO789-ORG)  abuse () RR COM
      (703) 345-3416
Fax- (703) 345-2517

   Record last updated on 23-Apr-99.
   Record created on 01-Oct-96.
   Database last updated on 17-May-99 15:14:01 EDT.

   Domain servers in listed order:

   NS1.MEDIAONE.NET             24.128.1.80
   NS2.MEDIAONE.NET             24.128.1.81
   NS1.MW.MEDIAONE.NET          24.131.1.8