The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
2answers
70 views

Which domain should have 'abuse' or 'postmaster' or “fbl” email accounts?

Consider that I am providing SMTP services for several clients and the sender / SMTP domain is mails.mysmtp.com. When client A is using my email infrastructure, he may use from address (from header) ...
0
votes
2answers
67 views

Prevent abuse of sendmail for spam

In web servers that host many websites there is always the possibility of a hacked site being abused in order to send spam mails with some kind of php mailer bot. In my case sendmail is configured ...
-1
votes
2answers
117 views

How to handle an abuse complaint? [closed]

I have just received an abuse complaint from my hosting service: [2014-04-04 03:30:23 CET] [Timestamp:1396575024] [11717182.634230] Firewall: *UDP_IN Blocked* IN=eth0 OUT= SRC=My IP ...
2
votes
2answers
79 views

Is it worth sending abuse mail?

I have been running my own e-mail server for a while, and I noticed that scanning for open relays has been on the rise during the last days. So I whipped up a little script that parses postfix logs, ...
1
vote
1answer
129 views

Debian 7.2 (wheezy) - Block domain

0 down vote favorite A few days ago I figured out that someone was trying to get access to my mailserver, obviously to send spam emails through. After some research I found out that the sender uses ...
3
votes
2answers
656 views

Someone is abusing my server but how do I stop the abuse? [duplicate]

I am beginner system admin on a bunch of virtualized web servers. Recently we got an e-mail that one of our servers is being used for 'brute force' attacks. The content of the e-mail was similar to ...
3
votes
1answer
4k views

/usr/bin/host being used in HTTP DDoS on Debian? [duplicate]

So I got an abuse complaint for one of my dedicated servers, running Debian 6.0 Sure enough, sometimes, top shows /usr/bin/host using a lot of CPU for no apparent reason, and netstat shows process ...
0
votes
1answer
413 views

How to automatically get abuse email address based on IP address

Unfortunately I've been the target of a DDoS attack. The attackers are abusing DNS services of others. I'd like to email the owners of these DNS services, but I don't want to manually run 500+ whois ...
0
votes
2answers
169 views

Prevent hotlinking at DNS level

I used my own server to host an example file (an image) when I posted an answer to a question at StackOverflow. Now someone has copied the code I used, including the URL to the file on my server. The ...
2
votes
3answers
309 views

Limiting CPU/IO usage for linux services

I've seen EXIM crash a system when it gets loaded by 10000s of e-mails from a user/script. I was wondering if there was a way to limit it's usage on a system and protect the system or service from ...
0
votes
3answers
119 views

Help locate DNS blockage

It appears that there is something blocking a large number of consumers from getting to www.webs.com. This seems to be caused by a blockage of dns queries ending with webs.com. Can anyone ...
9
votes
5answers
4k views

Should I report hacking attempts?

I am running a small (Windows-based) server. When I check the logs, I see a steady flow of (unsuccesfull) password-guessing hacking attempts. Should I try to report those attempts to the owners of the ...
1
vote
2answers
462 views

How to write a good abuse email?

I work for a service provider, and we've suffered an attack. We've learned from it, but nonetheless it has cost us. The good thing is we have pcap traces of the event, and IP addresses. Now my ...
1
vote
2answers
223 views

spamming domain registrar with multiple host records, same IP

Yesterday, I noticed that a client (who has just enough knowledge of networking to be dangerous) had messed up one of his nameserver records. We'd recently relocated to a different colocation ...
3
votes
2answers
202 views

Detecting login credentials abuse

Greetings. I am the webmaster for a small, growing industrial association. Soon, I will have to implement a restricted, members-only section for the website. The problem is that our organization ...
0
votes
3answers
55 views

Online domain or link filter?

I plan to do a tinyurl like site. The problem is i dont want domains to hide behind me if they are up to no good. An example site is http://www.noob.com/. Firefox+google reports it as a attack site. ...
0
votes
2answers
215 views

Detecting proxy server connections

We are having issues with users using proxy servers and causing trouble on our website. Is there an updated SQL list of proxy servers, indexed by IP, available anywhere so that we can query it and ...
4
votes
7answers
804 views

IP Address Trace

If you wanted to trace an IP address because that IP Address was the source of attacks and abuse, how would you accomplish this? Is there anything one can do to find who is using a given IP address ...
6
votes
13answers
6k views

Relatively easy way to block all traffic from a specific country?

I know this sounds terrible, but I have a web app that has no users in the Philippines, but is constantly bombarded by spammers, carders testing cards, and other BS from there. I can see in the logs ...