Re: constant attacks - whom to contact?
- From: Chris Kronberg <smil@xxxxxxxxx>
- Date: 28 Jun 2006 20:41:38 GMT
On 2006-06-24, E. <bellyup@xxxxxxx> wrote:
Chris Kronberg wrote:
For nearly two months now I see constant attacks by a
certain host in the US. Sending mail to the responsible
persons and providers abuse address didn't change a
things. The attacks continue. The next hop upwards
leads over the ocean to Europe, so it is not likely
that anything is going to happen here.
Is there any official address where people can turn
to, when a provider doesn't react? After all there is
a good chance that the host in question is compromised.
Sure, I can set a filter on my side to block the traffic
but that does not solve the initial problem.
Could you post logs or a data capture of the attack?
If I wanted to disclose the details I've had already
done so. The provider in question has a hard struggle
to get back a somewhat good reputation after some really
nasty spam problems. As a matter of fact there was only
one complaint in the public in the last 12 months. Unless
that provider proves to be back on the rogue side I will
not badmouth him more than necessary. ;-) Public disclosure
is the last refuge I want to take.
Anyhow, the problems seems to have been solved finally.
Some providers seem to be veeeeerryyyyy slow.
Bear in mind if you are sending PFW logs or router logs to someone as a
complaint they will just laugh and hit delete.
Sure. I would not laugh but hit delete anyway in that case.
If it is a compromised host sending out the scans try and put them on a
compromised host blacklist. That *may* get their attention.
That is a way to go. Thank you, I'll note that for the
future. :-)
Cheers,
Chris.
.
- References:
- constant attacks - whom to contact?
- From: Chris Kronberg
- Re: constant attacks - whom to contact?
- From: E.
- constant attacks - whom to contact?
- Prev by Date: Ethereal becomes Wireshark
- Next by Date: Re: constant attacks - whom to contact?
- Previous by thread: Re: constant attacks - whom to contact?
- Next by thread: FTC Loses Laptops - Compromises Information of Suspected Fraudsters
- Index(es):
Relevant Pages
|
