Re: fswserv.html ????

From: dev <dspezialie-NOSPAM(at)optusnet.com.au>
Date: Mon Dec 16 2002 - 18:40:32 EST

James,

I haven't seen anything like this before but have you thought about contacting the Tech for that CIDR or 'abuse@rr.com'. Other than that try killing the connections with a firewall rule or Apache ACL, or create a empty page so the client can request it and see if it will go away after a successfull get request. Whois details below.

D. :)

[whois.arin.net]

OrgName: Road Runner
OrgID: RRMA

NetRange: 24.160.0.0 - 24.170.127.255
CIDR: 24.160.0.0/13, 24.168.0.0/15, 24.170.0.0/17 NetName: ROAD-RUNNER-5
NetHandle: NET-24-160-0-0-1
Parent: NET-24-0-0-0-0
NetType: Direct Allocation

NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS4.RR.COM
Comment:

RegDate: 2000-06-09
Updated: 2002-08-22

TechHandle: ZS30-ARIN
TechName: ServiceCo LLC
TechPhone: +1-703-345-3416
TechEmail: abuse@rr.com

OrgTechHandle: IPTEC-ARIN
OrgTechName: IP Tech
OrgTechPhone: +1-703-345-3416
OrgTechEmail: abuse@rr.com

OrgTechHandle: IPCON-ARIN
OrgTechName: IPControl
OrgTechPhone: +1-703-345-3416
OrgTechEmail: tconley@va.rr.com

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-703-345-3416
OrgAbuseEmail: abuse@rr.com

# ARIN Whois database, last updated 2002-12-15 20:00 # Enter ? for additional hints on searching ARIN's Whois database.

James-lists wrote:
> [Mon Dec 16 15:46:54 2002] [error] [client 24.165.183.118]

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Tue Dec 17 13:19:20 2002