Avast / Privax abuse contact
Anybody know anyone at or anything about Privax or Avast? AS 198605 is announcing the problem networks. Getting a ton of SIP brute force attacks from their space, and emails with addresses/timestamps to the abuse contacts listed at RIRs/etc have not yieled any responses. Attacks still coming. Thanks!
Matt, Rarely do we ever get a response when we file complaints for SIP traffic. We simply use Kamilio and where have known bad UA's we just drop the packets and ban the IP's (using Fail2Ban), it will save you a lot of grief. It's like trying to go after every get request to phpMyAdmin. On Wed, Aug 1, 2018 at 1:11 PM, Matt Harris <matt@netfire.net> wrote:
Anybody know anyone at or anything about Privax or Avast? AS 198605 is announcing the problem networks.
Getting a ton of SIP brute force attacks from their space, and emails with addresses/timestamps to the abuse contacts listed at RIRs/etc have not yieled any responses. Attacks still coming.
Thanks!
I agree. Complaints are rarely acknowledged and never promptly. We simply use a combination of Fail2Ban and remote trigger black hole filtering to drop the inbound traffic from probing IPs at our borders. -----Original Message----- From: NANOG <nanog-bounces@nanog.org> On Behalf Of Dovid Bender Sent: Wednesday, August 1, 2018 3:09 PM To: Matt Harris <matt@netfire.net> Cc: North American Network Operators' Group <nanog@nanog.org> Subject: Re: Avast / Privax abuse contact Matt, Rarely do we ever get a response when we file complaints for SIP traffic. We simply use Kamilio and where have known bad UA's we just drop the packets and ban the IP's (using Fail2Ban), it will save you a lot of grief. It's like trying to go after every get request to phpMyAdmin. On Wed, Aug 1, 2018 at 1:11 PM, Matt Harris <matt@netfire.net> wrote:
Anybody know anyone at or anything about Privax or Avast? AS 198605 is announcing the problem networks.
Getting a ton of SIP brute force attacks from their space, and emails with addresses/timestamps to the abuse contacts listed at RIRs/etc have not yieled any responses. Attacks still coming.
Thanks!
On Wed, Aug 1, 2018, at 10:11 AM, Matt Harris wrote:
Anybody know anyone at or anything about Privax or Avast? AS 198605 is announcing the problem networks.
Chances are slim you'll get a useful response. Crappy "HIDE YOUR ACTIVITY TORRENT FREELY" VPN provider that has a TON of abusive traffic, tons of IP space with falsified whois data and falsified country/geolocation info.
try srboljub.bosnjak@avast.com . contacted us recently regarding a hidemyass vpn ip we have listed. btw, if you folks want to do more with such abusers, i could hook you up with us. Kind regards, Alexander Maassen - Maintainer DroneBL- Peplink Certified Engineer -------- Oorspronkelijk bericht --------Van: Matt Harris <matt@netfire.net> Datum: 01-08-18 19:11 (GMT+01:00) Aan: North American Network Operators' Group <nanog@nanog.org> Onderwerp: Avast / Privax abuse contact Anybody know anyone at or anything about Privax or Avast? AS 198605 is announcing the problem networks. Getting a ton of SIP brute force attacks from their space, and emails with addresses/timestamps to the abuse contacts listed at RIRs/etc have not yieled any responses. Attacks still coming. Thanks!
participants (5)
-
Alexander Maassen -
Dovid Bender -
Jack Barrett -
Matt Harris -
nop＠imap.cc