Brute Force Q

[rfonseca]

Hi,
I have BFD installed with APF and this works fine. I was wondering if any of you ever follow up on reporting brute force attacks to the responsible abuse contacts for the ip. I have had a few lately that are coming from the theplanet and comcast cable services. Is it worth forwarding the BFD email to the abuse contacts there?

thanks

[JP-HOST]

I once did this, but then there became so many that it was taking up all my time... It would be nice if somehow BFD would have the option to do a whois on the attacker's IP and automatically report it to the abuse address of the whois record.

[ntwaddel]

yeah its not worth the trouble. a lot of the ips originate from asian countries, and those isp's dont usually give a shit

[lloyd_tennison]

I do not know - but maybe someone at ironport might be interested. (They own SPamcop.net and senderbase.org, etc.)