Re: [MLUG - DISCUSSION] network scanning?

[Mike Miller <EMAIL:PROTECTED>]

On Sun, 1 Apr 2001, Michael wrote:

> I never have bothered to report scans/attacks to the ISPs themselves
> as it is so easy to find a new ISP.

Suppose @home booted you off of cable modem.  Then what would you do?
It's not all that easy to cope with, and I definitely wouldn't want it to
happen to me.

It must be easy for these people to scan freely and attack any machine in
the world that they feel like attacking when everyone feels helpless and
no one complains to ISPs.  I would say that I am scanned about 5 times per
day.  There are probably only a few thousand people in the world causing
all the trouble.  I think we can make a big dent by complaining about it.
I also think that warning kids (I assume most of them are kids) about
their scanning activities might help to stop them from getting into more
serious trouble.  Also, as I said before, many attacks are from
compromised machines that the owner doesn't know are compromised.  If we
don't tell them they were compromised, they'll never figure it out.

Below is an example of a reply to one of my complaints.  This one is from
the Netherlands.

Mike


--------------------------------------------------------------------------


Date: Sun, 1 Apr 2001 20:24:36 +0200
From: UPC Nederland Abuse <EMAIL:PROTECTED>
To: 'Mike Miller' <EMAIL:PROTECTED>
Subject: RE: printer port and telnet scan from node18dcf.a2000.nl

Dear Sir, Madam,

This message is to notify you that UPC Nederland Abuse Account has taken
action on the complaint you have sent to us.

We do view the conduct that generated your complaint as prohibited, and we
have taken the necessary steps to make certain that the account understands
the prohibition and will act accordingly our general conditions or "fair use
policy"

Hopefully these steps are sufficient. Otherwise we will take further action
against this account.

Kind regards,
UPC Nederland Abuse account

--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/