Reporting abuse

[plasticjanner]

I've made use of virgin's abuse submission site twice now.
http://netreport.virginmedia.com
It would be nice to know they're actually looking at these reports rather than just the automatic 'thank-you' email...
They're not the usual spam/port-scanning stuff.
One abuser (Virgin IP) is the IRC hub (not another zombie node) for a UK based botnet so its pretty important. I've got stacks of evidence, mostly screenshots, IRC logs, TCPdumps etc but none of it seems admissible. They just want firewall logs or emails.
I even taunted the guy and got an abusive email from him where he admitted it all and claimed he was uncatchable...
Any Virgin security guys here??

[The Jackal]

lol ! Grow up will you

[scrotnig]

I've made use of virgin's abuse submission site twice now.
http://netreport.virginmedia.com
It would be nice to know they're actually looking at these reports rather than just the automatic 'thank-you' email...
They're not the usual spam/port-scanning stuff.
One abuser (Virgin IP) is the IRC hub (not another zombie node) for a UK based botnet so its pretty important. I've got stacks of evidence, mostly screenshots, IRC logs, TCPdumps etc but none of it seems admissible. They just want firewall logs or emails.
I even taunted the guy and got an abusive email from him where he admitted it all and claimed he was uncatchable...
Any Virgin security guys here??
Wasting your time. They don't respond to ANY emails, never mind abuse reports.

Abuse reports have always been ignored...and always will be. They don't take security even remotely seriously. Let's face it, they don't take providing a connection remotely seriously.

[Pushkar]

If they don't take abuse reports seriously, then if a big company is being attacked then they could sue VM and make $$$.

Just a suggestion, unlucky for you though.

[plasticjanner]

It's no skin off my back (I don't use windows ;)) if it doesn't get sorted but It would be one less botnet on the net which at the end of the day would be a good thing.:D

[Toto]

Abuse reports have always been ignored...and always will be. They don't take security even remotely seriously.

Know this for a fact do you?

Have evidence to support your claim?

[The Jackal]

He offers you a service that you connect to and you want to report him ?

As I said before "GROW UP", you have options not to join his network.... This is absolute childness mate afterall it is the internet you know.

Oh oh oh I should report someone for hurling abuse at me on xbox live .... oh oh oh.

And what exactly have they done to warrant such an action ? I'm just wondering as IRC is full of illegal porn, so I'm just wondering indeed.

[Toto]

He offers you a service that you connect to and you want to report him ?

As I said before "GROW UP", you have options not to join his network.... This is absolute childness mate afterall it is the internet you know.

Oh oh oh I should report someone for hurling abuse at me on xbox live .... oh oh oh.

And what exactly have they done to warrant such an action ? I'm just wondering as IRC is full of illegal porn, so I'm just wondering indeed.

IRC is also a major controller network for botnets. The O/P has a point, if its a botnet controller, then it needs looking at.

If VM want to ignore it then fine. :)

[The Jackal]

IRC is also a major controller network for botnets. The O/P has a point, if its a botnet controller, then it needs looking at.

If VM want to ignore it then fine. :)

Then you report it to the IRC server host. :confused:

But let there be no confusion here, O/P has a problem that so many people happily connect to 'so called' abusers hub without any problems except for him LOL.

[Toto]

Then you report it to the IRC server host. :confused:

But let there be no confusion here, O/P has a problem that so many people happily connect to 'so called' abusers hub without any problems except for him LOL.

Sure thing, you have to deal with the host....as well.

A responsible network though would do their best to make sure that if their network was responsible for a lot of that traffic, then they should chop it off at the ankles. :)

IRC has its place in Internet Lore in my opinion, but like all aspects of the great network its been exploited to incredible proportions.

[The Jackal]

Sure thing, you have to deal with the host....as well.


Well if I was a cry baby then thats what I would have done... boot him off the main IRC server - job done :rolleyes:

What more does he want ? Him being arrested ? LOL

[Agent47]

I dont think abuse reports are ignored, someone reported me just for something I said on a newsgroup and two days later my broadband stopped working. Phoned up CS to be told I have to contact the security team.

The person grassed me up and VM suspended my BB.

[The Jackal]

Absolutely sad... The internet is full of idiots but what you gonna do ? ban them all ? and for how long exactly ? They just switch servers/IP addresses.

Ban 1 you'll be up against another in no time at all.

As I've been trying to say ..

" This is the internet, no one forced you to join, no one forces you to listen so get with the program and respect each others space. If you don't like it leave and move somewhere else "

[plasticjanner]

He offers you a service that you connect to and you want to report him ?

As I said before "GROW UP", you have options not to join his network.... This is absolute childness mate afterall it is the internet you know.

Oh oh oh I should report someone for hurling abuse at me on xbox live .... oh oh oh.

And what exactly have they done to warrant such an action ? I'm just wondering as IRC is full of illegal porn, so I'm just wondering indeed.
Have you been living in a cave? The internet is plagued by criminal botnets. Many IRC based. without going into too much detail, this network was created by a windows worm which recruits the computer into a botnet to be mass-controlled by its bot-master. I received a copy of the worm after setting up a honeypot to catch such worms.
Your abusive language and unwarranted aggression is similar to what I received when I contacted its owner over MSN after doing a WHOIS on the domain. Funny that...

[The Jackal]

Your abusive language and unwarranted aggression is similar to what I received when I contacted its owner over MSN after doing a WHOIS on the domain. Funny that...

I wonder why :rolleyes:

Have you been living in a cave?

Yeh more or less I was on IRC when you were being bottle fed.


The internet is plagued by criminal botnets. Many IRC based. without going into too much detail, this network was created by a windows worm which recruits the computer into a botnet to be mass-controlled by its bot-master. I received a copy of the worm after setting up a honeypot to catch such worms.


Why don't you want to divulge the details ? Why are you on that network in the first place... Yes you don't want to divulge into your own wrong doings so you go and set up a honey pot :rolleyes:

IRC is well known for its activities and there are professional organisations putting time and money into finding REAL criminals so I don't think we need amateurs like you in the mix.

[plasticjanner]

Then you report it to the IRC server host. :confused:

But let there be no confusion here, O/P has a problem that so many people happily connect to 'so called' abusers hub without any problems except for him LOL.
Try reading posts before replying kid.
The IRC server host is a VIRGIN IP. Hence why I submitted an abuse report...drumroll...to VIRGIN.
I don't have a problem connecting to his botnet because I did it intentionally. For all the 100's of folks with hacked computers recruited to his botnet it is however a problem.

[The Jackal]

Try reading posts before replying kid.
The IRC server host is a VIRGIN IP. Hence why I submitted an abuse report...drumroll...to VIRGIN.
I don't have a problem connecting to his botnet because I did it intentionally. For all the 100's of folks with hacked computers recruited to his botnet it is however a problem.

ROFL at this guy - this is the internet freedom of speech et al...

100's of folk who got hacked ? So how do you know these '100s' of people who intentionally connected to an IRC server that is not mainstream (for some bizarre reason that you don't want to divulge in).

I see people wormed everyday I don't go out my way to report the abusers or flood their link.

Obviously there's something fishy going on here that you are just not telling us.

[plasticjanner]

ROFL at this guy - this is the internet freedom of speech et al...

100's of folk who got hacked ? So how do you know these '100s' of people who intentionally connected to an IRC server that is not mainstream (for some bizarre reason that you don't want to divulge in).

I see people wormed everyday I don't go out my way to report the abusers or flood their link.

Obviously there's something fishy going on here that you are just not telling us.
There's plenty else I'm not telling you. For no other reason than you're an immature abusive kid. The Computer Misuse Act is a real law and more people are getting prosecuted under it every day, only not all make the news.
The maximum sentences were recently doubled meaning teenagers who thought they were having harmless fun are now looking at real jail terms.
The UK has been quite behind the US in terms of prosecutions for internet offences but that will all change in the next few years...

Everyone else, thanks for your advice. I've since made progress with my complaint. ;)

[jaycee]

plasticjanner, well done for being responsible. Hosters of botnets need to be found and stopped as soon as they're discovered.

[Stuart]

ROFL at this guy - this is the internet freedom of speech et al...


Freedom of speech is one thing, but with freedom comes responsibility.

I don't see why you appear to have a problem with the guy reporting this person. Maybe you should be criticising the people who actually create the botnets? Let's face it, botnets don't advance hacking much, and slow the internet for a large group of people.

[jaycee]

probably a script kiddie

[janipewter]

Wow, what the hell is wrong with you people? Slating the OP because he's trying to do some good? Christ, take a break. I bet the majority of you flaming idiots have no idea what a botnet even is. Maybe some of you should do some research, and at the same time, grow up. I've never seen such blatant immature flaming from people who are supposed to be 'mature adults'.

If someone murdered someone you didn't know, even though you didn't know them, you'd naturally want anyone with information to help the police find the person responsible. This is the same sort of situation, yet you're flaming the hell out of this guy? What is wrong with you?

@CrC-Error: chill out and grow up.

[joglynne]

Until I started reading this thread I've never heard of botnets, and so I have just been looking to see what they are. One of the things I have read is that It has been estimated that up to one quarter of all personal computers connected to the internet are part of a botnet.
http://www.answers.com/botnets?cat=technology&gwp=16

I have a fairly comprehensive selection of protection programs installed by my son who works in the IT industry so I trust that I am relatively safe as long as I keep them up to date. I would be interested to know whether there is any simple way to see if a computer was being used in this way or would you only be aware that your computer was not functioning as normal?

:( ..I have tried to find out this information but once my research went past the initial question stage the results I was getting were too technical/jargon'ized' for me to understand what I was reading.:dozey:..:dunce:

[lordsnooty]

It's quite clear that CrC-3rr0r has misunderstood on a massive scale. He doesn't even know what a botnet is.

[Stuart]

IRC is well known for its activities and there are professional organisations putting time and money into finding REAL criminals so I don't think we need amateurs like you in the mix.

Sorry, but that is complete .... It is like saying that the Police are investing money and time in tracking serious criminals so we shouldn't bother reporting minor crimes.

[Ben B]

Sorry, but that is complete .... It is like saying that the Police are investing money and time in tracking serious criminals so we shouldn't bother reporting minor crimes.

well said :)

---------- Post added at 01:32 ---------- Previous post was at 01:27 ----------

ROFL at this guy - this is the internet freedom of speech et al...

100's of folk who got hacked ? So how do you know these '100s' of people who intentionally connected to an IRC server that is not mainstream
Because he does his research but that's just something you apparently haven't heard of isn't it
(1)I see people wormed everyday I don't go out my way to report the abusers or flood their link.

(2)Obviously there's something fishy going on here that you are just not telling us.

(1) that's just you though isn't it but this person isn't as selfish as you

(2) either that or they RESEARCH things

[Mick Fisher]

Until I started reading this thread I've never heard of botnets, and so I have just been looking to see what they are. One of the things I have read is that
http://www.answers.com/botnets?cat=technology&gwp=16

I have a fairly comprehensive selection of protection programs installed by my son who works in the IT industry so I trust that I am relatively safe as long as I keep them up to date. I would be interested to know whether there is any simple way to see if a computer was being used in this way or would you only be aware that your computer was not functioning as normal?

:( ..I have tried to find out this information but once my research went past the initial question stage the results I was getting were too technical/jargon'ized' for me to understand what I was reading.:dozey:..:dunce:
If you scroll down in that thread and find/follow the link to Intrusion-Prevention system there is some good advice.
Basically they are saying to install a software firewall. Unlike a hardware firewall (found in routers) software firewalls can stop connection attempts both ways. So even if you are unlucky enough for your computer to get zombiefied the firewall will stop the trojan from phoning home, well hopefully anyway. :)
Regular scanning with AV and anti malware should keep your machine clean.
Indications of infection (but not proof) are internet connection constantly in use by an unknown application and the machine getting extremely sluggish while this is happening.
If you suspect an infection run a hijackThis scan and send the result to one of the participating forums for analysis and advice.

[Paul]

He offers you a service that you connect to and you want to report him ?

As I said before "GROW UP", you have options not to join his network.... This is absolute childness mate afterall it is the internet you know.

Oh oh oh I should report someone for hurling abuse at me on xbox live .... oh oh oh.

And what exactly have they done to warrant such an action ? I'm just wondering as IRC is full of illegal porn, so I'm just wondering indeed.


I can't quite work out if you really are as ignorant about botnets as your posts suggest, or you are just trying to wind people up. Either way I suggest you refrain from posting further unless you have something constructive to say.

[Impz2002]

I think the O/P is just looking for something to complain about. If you are setting up honeypot's to trap such worms then you are obviously gonna get bitten.

Leave the spam/trojan hunting to the professional such as symantec / norton.

The internet is what it is and there will always be people who wrongly exploit it. the best thing you could do is avoid such places / networks.

my 10pence :)

Impz

[joglynne]

<snip> #27
.

Thanks for the reply Mick. I guess a lot of computer users are like me and don't realise the actual extent of the nasties lurking about waiting for an open door. I have known about spam and the like but never realised what they were really hiding. Just glad I have a firewall installed.:)

[lordsnooty]

I think the O/P is just looking for something to complain about. If you are setting up honeypot's to trap such worms then you are obviously gonna get bitten.
That's the point of setting up a honeypot...
Leave the spam/trojan hunting to the professional such as symantec / norton.
The fact that the 'professionals' are not managing to keep botnets under control validates his actions.
The internet is what it is and there will always be people who wrongly exploit it. the best thing you could do is avoid such places / networks.
No, the best thing you could do is help to shut down the criminals that use hacked PCs to blackmail businesses. Why turn a blind eye?

Seems to me that nobody slating the OP actually knows what he's talking about.

[plasticjanner]

Pleased to see this issue getting the attention it deserves, thanks guys.
It's a massive problem and the police are fairly inept at dealing with it which is why they need all the help and reporting they can get, whether that be amateur or professional.
I don't know what CrC-3rr0r was drinking or smoking when he replied but it was obvious from the outset he was ranting without thinking or understanding.
Re the post from Impz2002:
This is not the first botnet I've tackled and probably won't be the last. It has however attracted my interest because it's the first one I've seen based in the UK and the owner gave me no-end of abuse when I foolishly offered him the chance to shut it down quietly and walk away.
He blew it so he's going to get what he's due. Hopefully a prison sentence.
I think honeypots are great, I know of plenty success stories where people have been contacted by their ISP and informed that their box is infected thanks to the efforts of security amateurs. Is that a bad thing?

[xspeedyx]

really doesnt matter as the op is one of many his actions will not the nasties go away but fair play if thats what he believes in as I head someone say on this thread freedom of speech that totally got nothing to do with the internet so thats really not a good way to defence one 2 cents but hey I really dont know what a bot net is but if it comes to people advising to use av and good firewalls then its gotta be bad so the op is correct to report someone now if it was because the guy was just downloading off irc I see no problem in that unless he was affect the op or the person that was to complant and report internet abuse I guess what I am saing is nice one op and remember one man cant change the world but can try

[dilli-theclaw]

Can I remind people NOT to discuss reps received/given... If you think you have got a rep in error or unjustly please pm a member of the team.

Jefferson T

[Ben B]

Can I remind people NOT to discuss reps received/given... If you think you have got a rep in error or unjustly please pm a member of the team.

Jefferson T

Ok i didn't know that, sorry, my mistake:angel:

[dilli-theclaw]

NP :tu: :)

[Mick Fisher]

Thanks for the reply Mick. I guess a lot of computer users are like me and don't realise the actual extent of the nasties lurking about waiting for an open door. I have known about spam and the like but never realised what they were really hiding. Just glad I have a firewall installed.:)
You are very welcome. It's only users ignorance and apathy that allows these things to flourish. If you want to further your knowledge can I recommend the excellent resource of Wilders Security Forums. http://tinyurl.com/39dj6s