Security Basics mailing list archives

Re: Blocking hack attempts from foreign countries...


From: "Jay" <jay.tomas () infosecguru com>
Date: Wed, 19 Sep 2007 12:04:51 -0400

Yeah, Im sure Nasa blocked all Brazillian domain space. With Brazils thriving economy and huge space program I would 
see why Nasa would be of interest.

Go back to the beach and your umbrella drink and stop spreading rumors.

Jay
----- Original Message -----
From: Fabio Fagundes [mailto:fabio.fagundes () gmail com]
To: security-basics () securityfocus com
Sent: Wed, 19 Sep 2007 10:55:20 -0300
Subject: Re: Blocking hack attempts from foreign countries...

Dan,

A few years ago, all Brazilian IP Address Blocks got blocked by NASA (nasa.gov).

NASA claimed that they were getting to much hacking attempts and
defacements originating from Brazil.

One should be careful while blocking ip addresses blocks (sometimes
full A and B classes) because they may be blocking legitimate users
too.

And you?re right, try to contact the abuse and s/cirt account!!

Regards,
Fabio.
Rio de Janeiro - Brazil

On 9/16/07, p1g <killfactory () gmail com> wrote:
Dan,

I will contact the abuse or s/cirt account the Net owner(whois).

90% of the time you will get a response. I normally do not include any
trace files or log snippets in the initial email.

They will ask for them if they plan to pursue.

Either way, I personnally think you should do all you can and
especially DOCUMENT what you do in response to any successful or some
unsuccessful attempts on your network.


Current thread: