Re: global xing intrusions autobot forwards [ISEC-TKT:683210] [ISEC-TKT:683208]
Ken Connelly <[email protected]> Sun, 06 Feb 2005 18:39:33 -0600
| Newsgroups | gmane.comp.security.intrusions |
|---|---|
| Message-ID | <[email protected]> |
I complained about this to the intrusions list owner(s) two or three weeks ago, but haven't heard anything in response. My take on it is that a mailing list (ipadmin) has been subscribed to the Intrusions list, and that some address at Global Crossing that autoresponds is a member of that ipadmin list. First of all, it's *really* bad form to subscribe a list to a list. Second, if some member of the second list is an autoresponder, that just compounds things. - ken (the other) kenneth gf brown wrote: >Re: [ISEC-TKT:683210] [ipadmin] [Intrusions] FW: unauthorised ssh exploit >attmepts to our servers >Re: [ISEC-TKT:683208] [ipadmin] [Intrusions] FW: unauthorised root ssh >exploit attmepts to our servers > >has anyone else noticed reply postings from > >Global Crossing Internet Security [[email protected]] >in response to posts or reports sent to intrusions ?? > >hey GLOBAL CROSSING GUYS!!!! > >can you please investigate that your automated responder is not replying to >posts on this list... and asking me to chose which division of your company >shold receive a post from this list... >isnt that YOUR job??? > >at no point did I directly send to any address at gblx.net >the redirect to an autoresponder asking me to >redirect mail to security or abuse >is anoying as all hell. > >and the headers are indicating that you GOT THE post off >intrusions. > >see the two attached emails. > > > > > >[email protected] http://www.shadowplay.net >Phone: 204.284.3481 Toll Free: 866.590.0023 >Mobile: 204.470.9158 > >FOR CLIENT SUPPORT PLEASE CALL 204.470.9021 >or email [email protected] > > > > >------------------------------------------------------------------------ > >_______________________________________________ >Intrusions mailing list >[email protected] >http://www.dshield.org/mailman/listinfo/intrusions > > _______________________________________________ Intrusions mailing list [email protected] http://www.dshield.org/mailman/listinfo/intrusions