Security Incidents mailing list archives
Re: How to cope with, uhm, "mentally challenged" abuse personnel?
From: Nicholas Bachmann <nabachmann () YAHOO COM>
Date: Tue, 6 Mar 2001 08:51:29 -0800
Hi- You may wish to contact their NOC (network operations center) about the abuse. Based on records on the NOC Page (http://puck.nether.net/netops/index.html) their phone number is 1-800-900-0241 (this is probably a support #, the list didn't have a direct #), but Before you contact their NOC, though, you shold call your own NOC, as they may wish to call UUnet's NOC themselves, and may have contacts at UUnet. Because NOC's are staffed by smart people, they can figure out that your problem isn't "...of normal origin." The NOC page I mentioned earlier has more details... check it out. Hope this helps, Nick --- "Ralf G. R. Bergs" <rabe () RWTH-AACHEN DE> wrote:
Hi there, I have to report about 1 incident per day that is caused by ip addresses assigned to UUnet. Mostly it's sweeps across our whole class C, sometimes ICMP, sometimes even scans for 111/UDP. NONE of our LAN IPs EVER leave our LAN, since altho they're IPs officially assigned to us I masquerade (NAT) them at our router. The usual answer I receive from UUnet is the following: "The type of internet traffic you describe appears to be of normal origin." As I explained above NONE of our LAN IPs ever can be seen outside of our LAN, so HOW ON EARTH should this be "of normal origin???" Frankly I'm fed up with this kind of replies. I don't know whether it's just that the abuse personnel simply is underqualified for their job, or whether it's they simply can't cope with the growing number of incidents caused by their customers, but I don't feel like accepting this kind of ignorance. Any suggestions what I should do? If UUnet's personnel doesn't get their act together I could be forced to completely black-hole their respective subnets in our router. Thanks, Ralf -- Sign the EU petition against SPAM: L I N U X .~. http://www.politik-digital.de/spam/ The Choice /V\ of a GNU /( )\ Generation ^^-^^
__________________________________________________ Do You Yahoo!? Get email at your own domain with Yahoo! Mail. http://personal.mail.yahoo.com/
Current thread:
- How to cope with, uhm, "mentally challenged" abuse personnel? Ralf G. R. Bergs (Mar 03)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Utopian Admin (Mar 03)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Ralf G. R. Bergs (Mar 06)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Blake Frantz (Mar 03)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Ralf G. R. Bergs (Mar 06)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Gary Maltzen (Mar 04)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Ralf G. R. Bergs (Mar 06)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Nicholas Bachmann (Mar 06)
- <Possible follow-ups>
- FW: How to cope with, uhm, "mentally challenged" abuse personnel? Tyrannis Von Nettesheim (Mar 05)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Ralf G. R. Bergs (Mar 06)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Travis Pugh (Mar 06)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Justin Shore (Mar 06)
- Re: How to cope with, uhm, "mentally challenged" abuse personnel? Utopian Admin (Mar 03)