On 03/15/02 at 10:35, Chris Hufford wrote: > For the past few days, every hour or so, my SIMS server is being harvested > looking for valid email addresses. Each hour they try about 20 names. I have > long since blacklisted their IP but does anyone have a suggestion whether I > should report this to someone. If so, who? The offending IP address is: > 194.198.208.52
Report the activity to global-ip.net, as indicated by the whois result below. I'd try <[EMAIL PROTECTED]> first. Be sure to include relevant snippets from your SIMS logs as evidence. Good luck! % whois -h whois.ripe.net 194.198.208.52 % This is the RIPE Whois server. % The objects are in RPSL format. % Please visit http://www.ripe.net/rpsl for more information. % Rights restricted by copyright. % See http://www.ripe.net/ripencc/pub-services/db/copyright.html inetnum: 194.198.208.0 - 194.198.208.255 netname: SE-SYSTEMACCESS descr: Systemaccess AB descr: Kalmar country: SE admin-c: HEAL1-RIPE tech-c: HEAL1-RIPE status: ASSIGNED PA notify: [EMAIL PROTECTED] notify: [EMAIL PROTECTED] mnt-by: AS2874-MNT changed: [EMAIL PROTECTED] 20011009 source: RIPE route: 194.198.0.0/16 descr: GLOBALIP-NET origin: AS2874 mnt-by: AS2874-MNT changed: [EMAIL PROTECTED] 19961014 source: RIPE person: Henrik Alquist address: Sodravagen 49 address: 392 44 Kalmar address: Sweden phone: +46 480 149 00 e-mail: [EMAIL PROTECTED] nic-hdl: HEAL1-RIPE notify: [EMAIL PROTECTED] mnt-by: PERSONSE-MNT changed: [EMAIL PROTECTED] 20011009 source: RIPE -- Christopher Bort | [EMAIL PROTECTED] Webmaster, Global Homes | [EMAIL PROTECTED] <http://www.globalhomes.com/> | PGP public key available on request ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
