[Dshield] Resubmitting Fightback requests

Alan Frayer afrayer at frayernet.com
Mon Oct 13 00:54:51 GMT 2003


On Sun, 2003-10-12 at 00:26, Bruce Lilly wrote:

> How exactly is that supposed to work?
> 
> Here are 5 examples (whois info. trimmed for brevity) that have had
> fightbacks sent over a month ago, and the IP address is still attacking --
> none seem to have any type of "send a fightback" link:
> 
> 1.
> 
> IP Address:	200.13.202.75
> HostName:	200.13.202.75
> DShield Profile:	
> Country:	CO
> Contact E-mail:	pferreir at colomsat.net.co
> AS Number:	0
> Total Records against IP:	 300
> Number of targets:	 298
> Date Range:	2003-09-30 to 2003-10-11
> request contact update
> new data is currently being imported.
> Top 10 Ports hit by this source:
> Port	Attacks	Start	End
> 137	300 	2003-09-30	2003-10-11
> Last Fightback Sent: 	sent to pferreir at colomsat.net.co on 2003-05-02 16:54:31
> 
> 2.
> 
> IP Address:	200.204.148.84
> HostName:	200-204-148-84.speedyterra.com.br
> DShield Profile:	
> Country:	BR
> Contact E-mail:	nbso at nic.br
> AS Number:	10429
> Total Records against IP:	 695
> Number of targets:	 682
> Date Range:	2003-09-17 to 2003-10-10
> request contact update
> Summary was recently updated.
> Top 10 Ports hit by this source:
> Port	Attacks	Start	End
> 137	689 	2003-09-17	2003-10-10
> 139	6 	2003-09-18	2003-09-18
> Last Fightback Sent: 	sent to nbso at nic.br on 2003-07-04 21:35:46
> 
> 3.
> 
> IP Address:	203.131.97.62
> HostName:	adsl-131.97.62.info.com.ph
> DShield Profile:	
> Country:	PH
> Contact E-mail:	HIMARCELINO at pldt.com.ph
> AS Number:	7629
> Total Records against IP:	 1554
> Number of targets:	 1492
> Date Range:	2003-09-23 to 2003-10-10
> request contact update
> new data is currently being imported.
> Top 10 Ports hit by this source:
> Port	Attacks	Start	End
> 137	1493 	2003-09-23	2003-10-10
> 139	61 	2003-09-24	2003-10-03
> Last Fightback Sent: 	sent to HIMARCELINO at pldt.com.ph on 2003-06-26 02:33:11
> 
> 4.
> 
> IP Address:	212.160.191.253
> HostName:	host12.pcztasieradz.pl
> DShield Profile:	
> Country:	PL
> Contact E-mail:	abuse at tpnet.pl
> AS Number:	5617
> Total Records against IP:	 7422
> Number of targets:	 5755
> Date Range:	2003-09-17 to 2003-10-10
> request contact update
> new data is currently being imported.
> Top 10 Ports hit by this source:
> Port	Attacks	Start	End
> 137	5113 	2003-09-17	2003-10-10
> 135	1341 	2003-09-17	2003-10-10
> 139	508 	2003-09-17	2003-10-09
> 445	460 	2003-09-20	2003-10-09
> Last Fightback Sent: 	sent to abuse at tpnet.pl on 2003-09-02 12:09:47
> 
> 5.
> 
> IP Address:	67.32.129.210
> HostName:	adsl-067-032-129-210.sip.bct.bellsouth.net
> DShield Profile:	
> Country:	US
> Contact E-mail:	abuse at bellsouth.net
> AS Number:	6197
> Total Records against IP:	 1622
> Number of targets:	 1604
> Date Range:	2003-09-18 to 2003-10-06
> request contact update
> new data is currently being imported.
> Top 10 Ports hit by this source:
> Port	Attacks	Start	End
> 137	1622 	2003-09-18	2003-10-06
> Last Fightback Sent: 	sent to abuse at bellsouth.net on 2003-09-09 06:12:39

Right... and it's been a week or more since I've had an IP flagged for
Fightback appear on my list of Fightbacks sent!

________________________________________________________________________
Alan Frayer,CNE,CNI,CIW CI,MCP,Net+ - afrayer at frayernet.com
Seeking an IT Mgmt/Network Admin position in the Tampa Bay Region
If you would like to discuss an opportunity with me, please e-mail.





More information about the list mailing list