James Sparenberg wrote on Mon, Jul 29, 2002 at 08:50:24PM -0700 : > On the subject of Crackers. Note this IP block owned by ATT > 12.234.0.0/24 If been getting hit heavily from there by a number
You're making the assumption that those boxes are actually owned by ATT. In reality it's probably a customer of ATT. Or even worse, a customer or a customer of ATT. Let me put it in another perspective. ATT is selling to NSP which is selling a portion of that to ISP. One of the customers of ISP is who actually owns the box. That person is 3 layers removed from ATT. So if you call ATT to tell them about it, they won't talk to you because YOU are not a customer and THEY are not a direct customer. Best thing they'll do is block the /24 of that non-direct customer and that will only be if that non-direct customer's traffic is6 causing problems for their routers. Second best thing that'll happen is that they'll actually tell NSP "get your customer to fix their crap". Most likely is they'll tell you where to go (and it's hot there). Blue skies... Todd -- Todd Lyons -- MandrakeSoft, Inc. http://www.mandrakesoft.com/ UNIX was not designed to stop you from doing stupid things, because that would also stop you from doing clever things. -- Doug Gwyn Cooker Version mandrake-release-9.0-0.2mdk Kernel 2.4.18-21mdk
msg56604/pgp00000.pgp
Description: PGP signature
