Help - Search - Members - Calendar
Full Version: IP Spoofing
hsc message board > Main > hsc Software Support
Xiaopangzi
The following is typical of the kind of non-automated responses that I receive, notifying me that the IP address does not even exist, let alone being a node on the domain that is receiving complaints from Sp@mX. I’m wondering how many of these that people receive from various abuse desks.

QUOTE
The 34.x.x.x address space you have referenced in your email is not published on the internet; therefore any network traffic such as port scanning or unsolicited email from this range has been spoofed and is not originating from our network.

Halliburton is aware of the impact and is against the sending of unsolicited emails and takes every measure possible to verify that we are not the source of any commercial direct marketing emails.

If you are seeing unwarranted network traffic to your computer from a 34.x.x.x address the ip header information has been modified to display an incorrect address and is not originating from our network.

We apologize for the inconvenience and understand the frustration involved in these types of annoyances, but currently we are unable to assist any further in locating the origin of the email or network traffic that you are reporting.

To learn more here is a link to an anti-spam site http://spam.abuse.net

To learn more about port scanning see http://www.cs.wright.edu/~pmateti/Courses/499/Probing/

To learn more about IP Spoofing see http://www.securityfocus.com/infocus/1674
jenkins
I get these occasionally.

Sometimes I have written back asking for further details, and particularly requesting if they can help identify the real source if there has been spoofing. If they bother to reply, it's usually that they can't (or perhaps won't). I had assumed that abuse desk staff were reasonably expert and therefore could have provided useful instruction, but from some of the correspondence, I now believe that many abuse desk staff deal with UCE reports mechanically and don't really have any more idea that I have on what's really going on.

Peter
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.