nanog mailing list archives
Re: Bizarre (.bz) abuse report - are we alone?
From: valdis.kletnieks () vt edu
Date: Tue, 28 Aug 2012 08:37:30 -0400
On Sun, 26 Aug 2012 19:35:54 -0700, Jay Hennigan said:
On 8/25/12 3:29 PM, no-reply () abuse bz wrote:We have noticed illegal activity from [redacted] aimed at one of our servers. Please disable these brute force attempts, port scans and/or neighbour scanning technologies.
I haven't seen something this clue-challenged since the CIRT for one of the US military branches sent me an e-mail about network probes. Turned out that it was our Listserv machine, trying to send to the IP address that was listed as an MX for one of their subdomains, and said IP didn't have anything listening at port 25.
Attachment:
_bin
Description:
Current thread:
- Bizarre (.bz) abuse report - are we alone? Jay Hennigan (Aug 26)
- Re: Bizarre (.bz) abuse report - are we alone? Suresh Ramasubramanian (Aug 26)
- Re: Bizarre (.bz) abuse report - are we alone? Gino (Aug 26)
- Re: Bizarre (.bz) abuse report - are we alone? Jay Hennigan (Aug 26)
- Re: Bizarre (.bz) abuse report - are we alone? Suresh Ramasubramanian (Aug 26)
- Re: Bizarre (.bz) abuse report - are we alone? Jimmy Hess (Aug 26)
- Re: Bizarre (.bz) abuse report - are we alone? John Levine (Aug 26)
- Re: Bizarre (.bz) abuse report - are we alone? Suresh Ramasubramanian (Aug 26)
- Re: Bizarre (.bz) abuse report - are we alone? valdis . kletnieks (Aug 28)
- Re: Bizarre (.bz) abuse report - are we alone? Suresh Ramasubramanian (Aug 26)