[Dshield] Resubmitting Fightback requests

Bruce Lilly blilly at verizon.net
Sun Oct 12 04:26:17 GMT 2003


> From: Johannes Ullrich <jullrich at euclidian.com>
> Date: Tue, 07 Oct 2003 19:24:04 -0400
>
>You can resubmit a fightback after one month.

[...]

>>On Tue, 2003-10-07 at 14:16, Alan Frayer wrote:
>>
>>On occasion I find an IP on which I wish to submit a Fightback request,
>>and I find someone had turned one in two months earlier...
>>
>>Is there a way where I can submit an updated report to show the
>>person/machine is still at it?

How exactly is that supposed to work?

Here are 5 examples (whois info. trimmed for brevity) that have had
fightbacks sent over a month ago, and the IP address is still attacking --
none seem to have any type of "send a fightback" link:

1.

IP Address:	200.13.202.75
HostName:	200.13.202.75
DShield Profile:	
Country:	CO
Contact E-mail:	pferreir at colomsat.net.co
AS Number:	0
Total Records against IP:	 300
Number of targets:	 298
Date Range:	2003-09-30 to 2003-10-11
request contact update
new data is currently being imported.
Top 10 Ports hit by this source:
Port	Attacks	Start	End
137	300 	2003-09-30	2003-10-11
Last Fightback Sent: 	sent to pferreir at colomsat.net.co on 2003-05-02 16:54:31

2.

IP Address:	200.204.148.84
HostName:	200-204-148-84.speedyterra.com.br
DShield Profile:	
Country:	BR
Contact E-mail:	nbso at nic.br
AS Number:	10429
Total Records against IP:	 695
Number of targets:	 682
Date Range:	2003-09-17 to 2003-10-10
request contact update
Summary was recently updated.
Top 10 Ports hit by this source:
Port	Attacks	Start	End
137	689 	2003-09-17	2003-10-10
139	6 	2003-09-18	2003-09-18
Last Fightback Sent: 	sent to nbso at nic.br on 2003-07-04 21:35:46

3.

IP Address:	203.131.97.62
HostName:	adsl-131.97.62.info.com.ph
DShield Profile:	
Country:	PH
Contact E-mail:	HIMARCELINO at pldt.com.ph
AS Number:	7629
Total Records against IP:	 1554
Number of targets:	 1492
Date Range:	2003-09-23 to 2003-10-10
request contact update
new data is currently being imported.
Top 10 Ports hit by this source:
Port	Attacks	Start	End
137	1493 	2003-09-23	2003-10-10
139	61 	2003-09-24	2003-10-03
Last Fightback Sent: 	sent to HIMARCELINO at pldt.com.ph on 2003-06-26 02:33:11

4.

IP Address:	212.160.191.253
HostName:	host12.pcztasieradz.pl
DShield Profile:	
Country:	PL
Contact E-mail:	abuse at tpnet.pl
AS Number:	5617
Total Records against IP:	 7422
Number of targets:	 5755
Date Range:	2003-09-17 to 2003-10-10
request contact update
new data is currently being imported.
Top 10 Ports hit by this source:
Port	Attacks	Start	End
137	5113 	2003-09-17	2003-10-10
135	1341 	2003-09-17	2003-10-10
139	508 	2003-09-17	2003-10-09
445	460 	2003-09-20	2003-10-09
Last Fightback Sent: 	sent to abuse at tpnet.pl on 2003-09-02 12:09:47

5.

IP Address:	67.32.129.210
HostName:	adsl-067-032-129-210.sip.bct.bellsouth.net
DShield Profile:	
Country:	US
Contact E-mail:	abuse at bellsouth.net
AS Number:	6197
Total Records against IP:	 1622
Number of targets:	 1604
Date Range:	2003-09-18 to 2003-10-06
request contact update
new data is currently being imported.
Top 10 Ports hit by this source:
Port	Attacks	Start	End
137	1622 	2003-09-18	2003-10-06
Last Fightback Sent: 	sent to abuse at bellsouth.net on 2003-09-09 06:12:39




More information about the list mailing list