Re: [tlug] Dealing with webapp security scans

[Godwin Stewart <gstewart@example.com>]

On Thu, 28 Feb 2008 12:03:04 +0900, "Nguyen Vu Hung" <vuhung16plus
+shape@example.com> wrote:

> Question: How to deal with those compromised web servers? They are
> hacked and being used as 踏み台. Should I report them? If so, where to to
> report?
> 
> [1]
> http://aoclife.ddo.jp/~vuhung/tmp/tlug/grep.libwww-perl.httpd.access.log.txt

Don't bother. Just add the ranges to your firewall if you're worried about
the traffic.

Looking at the networks where this originates reads, with a few exceptions,
like a who's who of spammer protection organizations. At best, nothing will
happen because the providers will ignore your report, at worst your details
will be passed along to their spammer customers and you'll have a revenge
attack to deal with.

-- 
G. Stewart - gstewart@example.com

Seen in the classified ads:
NICE PARACHUTE: NEVER OPENED - USED ONCE

Attachment: pgpn0evB58gDA.pgp
Description: PGP signature