PacBell Security/Abuse contact

Mon Mar 25 20:20:01 UTC 2002

I agree.

> -----Original Message-----
> From: Jon Mansey [mailto:jon_mansey at verestar.com]
> Sent: Monday, March 25, 2002 12:17 PM
> To: Cheung, Rick
> Cc: nanog at merit.edu
> Subject: Re: PacBell Security/Abuse contact
> 
> 
> 
> UUnet, excellent responsive abuse team IMHO.
> 
> jm
> 
> On Monday, March 25, 2002, at 12:12 PM, Cheung, Rick wrote:
> 
> >         Does anyone have an opinion on a decent ISP out 
> there that's 
> > proven to work with the customer during a DDOS storm?
> >
> >
> > Rick Cheung
> >
> > -----Original Message-----
> > From: Jeremy T. Bouse [mailto:Jeremy.Bouse at undergrid.net]
> > Sent: Monday, March 25, 2002 2:46 PM
> > To: nanog at merit.edu
> > Subject: Re: PacBell Security/Abuse contact
> >
> >
> >
> >         More specifically I belive this is a Distributed 
> Reflection DoS
> > like what hit GRC.COM back on Jan 11th... Basically a flood of SYN
> > packets to well known ports from IPs which appear to be 
> spoofed. I've
> > actually been riding it out now for over 2 weeks...
> >
> >         The tech support is completely inept and trying to contact
> > security/abuse is pointless. Final realization of this was 
> when I was
> > investigating another PacBell customers box which had been 
> compromised
> > via another PacBell customer machine. After the forensics 
> to get back
> > logs and track the intrusion I tried contacting PacBell to 
> no avail and
> > then resulting it tryin to get in contact with their 
> customer directly.
> > Which I managed to do and resolve the issue... I've never dealt with
> > such an inept company before.
> >
> >         Jeremy
> >
> > On Mon, Mar 25, 2002 at 11:18:23AM -0800, Daniel M. Spielman wrote:
> > >
> > > At 11:11 PM 3/24/2002 -0800, you wrote:
> > >
> > > >        Anyone have a telephone number that can reach a 
> live person
> > > >within Pacific Bell's Security/Abuse department? 
> PacBell's technical
> > > >support is completely inept with trying to help their 
> customers when
> > > >under any form of network attack other than passing you 
> to a toll-free
> > > >number which informs you to send email to an address 
> that goes without
> > > >answer.
> > > >
> > > >        Respectfully,
> > > >        Jeremy T. Bouse
> > > >        UnderGrid Network Services
> > >         I've had a similar experience with their tech 
> team. I was being
> > > dos'd from a college in Chicago so I contacted them to 
> have it filtered 
> > out
> > > and they had no idea what I meant. They suggested I email 
> the Admin at 
> > the
> > > college to get it resolved. I started screaming at them 
> how am i going 
> > to
> > > email someone when I am being  attacked. Then they 
> transferred me to 
> > their
> > > supervisor who was even more inept then they were. 
> Frankly i gave up and
> > > just waited out the dos attack which lasted 2 1/2 days.
> > >
> >
> 