[HECnet] Telnet/SSH attacks

[Sampsa Laine]

Find their outgoing mail server, nmap -P0 -p1-65535 -T5 on a loop for a few days...

Should slow the fuckers down.... :)

sampsa	<sampsa at mac.com>
mobile +44 7961 149465

On 29 Nov 2013, at 04:59, Gregg Levine <gregg.drwho8 at gmail.com> wrote:

Hello!
Last month I was getting spammed by an idiot who refused to honor the
removal requests sent back from his own clients. I contacted the
services that were foolish enough to allow him to operate. Further
along one chap did in fact realize that I was indeed right regarding
that bozo, he then did the magic needed to close that account.

Eventually it stopped.

Now regarding VersaWeb, here's an idea, each time that idiot spams
you, explain to them that they owe you a fixed amount of currency, US
of course.

Do they have an abuse@ e-mail address? Send that note to them there
that the bozo is indeed spamming you, and further the more he
continues to do it, the more they will owe you a fixed amount over 50
dollars US.

Regarding for example those annoying people over in a country that has
other problems........ Never mind.

Let's move this back on topic.
-----
Gregg C Levine gregg.drwho8 at gmail.com
"This signature fought the Time Wars, time and again."


On Thu, Nov 28, 2013 at 11:38 PM, Cory Smelosky <b4 at gewt.net> wrote:
On Fri, 29 Nov 2013, Sampsa Laine wrote:


On 29 Nov 2013, at 03:48, Gregg Levine <gregg.drwho8 at gmail.com> wrote:

Hello!
Interesting problem that one, Sampsa as applied to the Asterisk PBX.
Now the important question, who is or was hosting them? I might know
of them?


It's hosted in a colo facility operated by NETRIPLEX LLC - I actually
sent them the message as an act of goodwill, the PBX operator probably
DOESN'T want to be compromised like this :)


Now if only VersaWeb would shitcan this spammer that keeps spamming me...I
wish companies were more like the one you contacted that cared.


A compromised NAS, interesting. It might have been deliberately spun
up that way.....


That was in China - I don't even bother contacting their abuse points,
useless...


I got annoyed with those not working so I contemplated contacting ARIN or
the CEO directly.   The CEO never emailed me back.



And I agree with you regarding the drivers license and the server issues.


It is getting ludicrous. Soon we'll all be behind NAT "for our own
safety". Ugh.


Yup...



--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects