Security Basics mailing list archives

Re: Blocking hack attempts from foreign countries...


From: "Fabio Fagundes" <fabio.fagundes () gmail com>
Date: Wed, 19 Sep 2007 10:55:20 -0300

Dan,

A few years ago, all Brazilian IP Address Blocks got blocked by NASA (nasa.gov).

NASA claimed that they were getting to much hacking attempts and
defacements originating from Brazil.

One should be careful while blocking ip addresses blocks (sometimes
full A and B classes) because they may be blocking legitimate users
too.

And you´re right, try to contact the abuse and s/cirt account!!

Regards,
Fabio.
Rio de Janeiro - Brazil

On 9/16/07, p1g <killfactory () gmail com> wrote:
Dan,

I will contact the abuse or s/cirt account the Net owner(whois).

90% of the time you will get a response. I normally do not include any
trace files or log snippets in the initial email.

They will ask for them if they plan to pursue.

Either way, I personnally think you should do all you can and
especially DOCUMENT what you do in response to any successful or some
unsuccessful attempts on your network.


Current thread: