John, Haven't yet, was trying to avoid a screaming match over the telephone. That will be my last resort if no one on this list has any other contacts for them. On 5/10/2012 1:57 PM, John Peach wrote:

On Thu, 10 May 2012 13:52:23 -0400 Christopher Singhaus <csinghaus@hopone.net> wrote:

...

Not sure if this is the right list to send this out to, but I figured I'd give it a try. I'm looking for anyone with a contact at Eircom.net. Customers on their network are continually trying to brute force RDP machines on our network. Fail2ban does automatically null route them and send them an email, however all I get is a rfc-ignorant auto reply stating to fill out a form on their website. In fact, they have been listed as rfc ignorant since 2006.

http://www.rfc-ignorant.org/tools/detail.php?domain=eircom.net&submitted=1140112265&table=abuse

I've also sent emails to noc@eircom.net but received no reply whatsoever.

Just looking for a human to talk to at this point or any other advice.

Did you try calling them? Eircom Ltd hostmaster@eircom.net 1 Heuston South Quarter St Johns Road, Dublin 8 ie IE +35316008010

-- Christopher Singhaus, Systems Administrator / Abuse Dept HopOne Internet Corp. - AS 14361 - www.hopone.net "Yesterday's weirdness is tomorrow's reason why." -Hunter S Thompson

Actually, that might of worked. I at least got someone's 'out of the office' auto response this time around instead of the 'fill out a form on our website'. Looks like I need to wait until May 15th though. On 5/10/2012 2:02 PM, Max Larson Henry wrote:

maybe

hostmaster@eircom.net :)

or 1 Heuston South Quarter St Johns Road, Dublin 8 ie IE

or +35316008010

whois Eircom.net

.... Registrant: Eircom Ltd 1 Heuston South Quarter St Johns Road, Dublin 8 ie IE Domain Name: EIRCOM.NET

Administrative Contact, Technical Contact: Eircom Ltd hostmaster@eircom.net 1 Heuston South Quarter St Johns Road, Dublin 8 ie IE +35316008010

-Max On Thu, May 10, 2012 at 12:52 PM, Christopher Singhaus <csinghaus@hopone.net> wrote:

...

Not sure if this is the right list to send this out to, but I figured I'd give it a try. I'm looking for anyone with a contact at Eircom.net. Customers on their network are continually trying to brute force RDP machines on our network. Fail2ban does automatically null route them and send them an email, however all I get is a rfc-ignorant auto reply stating to fill out a form on their website. In fact, they have been listed as rfc ignorant since 2006.

http://www.rfc-ignorant.org/tools/detail.php?domain=eircom.net&submitted=1140112265&table=abuse

I've also sent emails to noc@eircom.net but received no reply whatsoever.

Just looking for a human to talk to at this point or any other advice.

-- Christopher Singhaus, Systems Administrator / Abuse Dept HopOne Internet Corp. - AS 14361 - www.hopone.net

"Yesterday's weirdness is tomorrow's reason why." -Hunter S Thompson

-- Christopher Singhaus, Systems Administrator / Abuse Dept HopOne Internet Corp. - AS 14361 - www.hopone.net "Yesterday's weirdness is tomorrow's reason why." -Hunter S Thompson

That sounds like Eircom. They're in financial trouble at the moment so they probably doubly don't care about their customers or anyone else unless they're taking them to court or willing to buy them. Their twitter account seems to be responsive ( https://twitter.com/#!/eircom ) although getting them to understand might take a few steps. Niall On 11 May 2012 07:10, John Levine <johnl@iecc.com> wrote:

In article <4FAC0660.7020200@hopone.net> you write:

...

Actually, that might of worked. I at least got someone's 'out of the office' auto response this time around instead of the 'fill out a form on our website'. Looks like I need to wait until May 15th though.

Last time I tried to engage with Eircom, I encountered a severe case of "we don't care, we don't have to, we wouldn't even know how, we're The Phone Company."

R's, John