Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.misc > #27559 > unrolled thread

Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack

Back to article view | Back to comp.os.linux.misc

Contents

  Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Nomen Nescio <nobody@dizum.com> - 2019-07-06 10:36 +0200
    Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Jean-David Beyer <jeandavid8@verizon.net> - 2019-07-27 22:13 -0400
      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack POSHLYAK <POSHLYAK@localmail.com> - 2019-07-28 02:22 +0000
        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Keith Nuttle <Keith_Nuttle@sbcglobal.net> - 2019-07-27 22:50 -0400
        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Snowden" <Edmail@fromrussiawithlove.net> - 2019-07-28 08:49 -0500
          Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Anonymous" <anon@anon.com> - 2019-07-28 08:50 -0500
            Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-28 16:30 +0200
              Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2019-07-28 23:50 +0100
                Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack The Natural Philosopher <tnp@invalid.invalid> - 2019-07-29 01:37 +0100
                  Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2019-07-29 03:01 +0100
                    Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack The Natural Philosopher <tnp@invalid.invalid> - 2019-07-29 11:33 +0100
                      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2019-07-29 11:58 +0100
                        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Shadow <Sh@dow.br> - 2019-07-29 08:12 -0300
                        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-29 13:27 +0200
                          Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "anonymous" <anonymous@rip.ax.lt> - 2019-07-29 07:04 -0500
                            Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack doctor@doctor.nl2k.ab.ca (The Doctor) - 2019-07-29 13:34 +0000
                              Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-29 15:45 +0200
                                Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Anonymous" <anon@anon.com> - 2019-07-29 09:31 -0500
                                  Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-29 20:54 +0200
                            Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Char Jackson <none@none.invalid> - 2019-07-30 10:42 -0500
                          Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Char Jackson <none@none.invalid> - 2019-07-30 10:40 -0500
                        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Mayayana" <mayayana@invalid.nospam> - 2019-07-29 08:21 -0400
                          Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-29 15:47 +0200
                        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack The Natural Philosopher <tnp@invalid.invalid> - 2019-07-29 15:03 +0100
                    Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-29 12:58 +0200
                    Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Anonymous" <anon@anon.com> - 2019-07-29 06:59 -0500
                Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Paul <nospam@needed.invalid> - 2019-07-28 23:52 -0400
                  Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2019-07-29 12:11 +0100
                  Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Andreas Kohlbach <ank@spamfence.net> - 2019-07-29 15:34 -0400
                    Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-30 00:00 +0200
                      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2019-07-30 02:30 +0100
                        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-30 11:57 +0200
                          Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2019-07-30 16:18 +0000
                      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Frank Slootweg <this@ddress.is.invalid> - 2019-07-30 13:12 +0000
                      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Andreas Kohlbach <ank@spamfence.net> - 2019-07-30 15:02 -0400
                        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-31 12:52 +0200
                          Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Andreas Kohlbach <ank@spamfence.net> - 2019-07-31 14:59 -0400
                    Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2019-07-30 00:35 +0000
                    Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2019-07-30 02:26 +0100
                      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Andreas Kohlbach <ank@spamfence.net> - 2019-07-30 15:08 -0400
                Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Anonymous" <anon@anon.com> - 2019-07-29 06:57 -0500
                  Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack nospam <nospam@nospam.invalid> - 2019-07-29 07:58 -0400
                    Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Anonymous" <anon@anon.com> - 2019-07-29 07:08 -0500
                      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack nospam <nospam@nospam.invalid> - 2019-07-29 08:13 -0400
                        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Carlos E.R." <robin_listas@es.invalid> - 2019-07-29 15:48 +0200
                      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Bobbie Sellers <bliss@mouse-potato.com> - 2019-07-29 08:32 -0700
                        Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack "Anonymous" <nobody@mixmin.net> - 2019-07-29 11:12 -0500
                          Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Bobbie Sellers <bliss@mouse-potato.com> - 2019-07-29 09:50 -0700
          Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Chuck Rhode <CRhode@LacusVeris.com> - 2019-07-28 11:18 -0500
      Re: Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack Charlie Gibbs <cgibbs@kltpzyxm.invalid> - 2019-07-29 15:36 +0000

Page 1 of 3  [1] 2 3  Next page →

#27559 — Florida city reportedly fires IT director after being forced to pay $460G in ransomware attack

A Florida city reportedly has fired one of its top tech 
employees after officials were forced to pay $460,000 in ransom 
to the hackers behind a cyber attack that disabled its servers, 
phones and email accounts.

Brian Hawkins, Lake City's director of information technology, 
was let go from his job Monday, about three weeks after the 
hackers' malware compromised the city's computer network, 
according to WCJB.

“Our city manager did make a decision to terminate one employee 
and he is revamping our whole IT department to comply with what 
we need to be able to overcome what happened... so it doesn't 
happen again,” Mayor Stephen Witt told the station.

Staff initially tried to restore the networks themselves 
following the ransomware attack, but failed. Lake City council 
members, at an emergency meeting last week, ultimately agreed to 
pay 42 Bitcoins (around $460,000) to the hacker in exchange for 
a decryption key that would get its networks back online. The 
city's IT team and a third party vendor, WCJB reports, told them 
it was their only resort.

https://www.foxnews.com/tech/florida-city-fires-it-director
 

[toc] | [next] | [standalone]

#27723

On 7/6/19 4:36 AM, Nomen Nescio wrote:
> A Florida city reportedly has fired one of its top tech 
> employees after officials were forced to pay $460,000 in ransom 
> to the hackers behind a cyber attack that disabled its servers, 
> phones and email accounts.

A friend of mine worked for a social services agency of our local
government many years ago. Some genius had the database of all the
necessary data in a single IBM IMS/DB IMS/DC system to handle all the
data of the entire state. At one point, they installed an update which
failed, and all the data were lost. My friend complained that all the
employees had to work nights and weekends to re-enter the previous
month's data transactions. During the daytime, they tried to serve their
customers (welfare, mostly).

I suggested that they just restore everything from the most recent
backup and then apply the updates from the journal tapes. (This was back
in the days of magnetic tape). I explained all this to my friend who
inquired as to why they were not doing this. It turns out that the
genius had turned off the backups because they took too much time and
they needed someone to change the tapes. So he saved a little money that
way.

But the welfare clients could not get their checks that month, many got
 evicted from their welfare hotels, and had problems paying for food and
medications. I very much doubt the genius got fired.

-- 
  .~.  Jean-David Beyer
  /V\  PGP-Key:166D840A 0C610C8B
 /( )\ Shrewsbury, New Jersey
 ^^-^^ 22:00:01 up 2 days, 6:52, 2 users, load average: 4.28, 4.32, 4.38

[toc] | [prev] | [next] | [standalone]

#27724

On 2019-07-28, Jean-David Beyer <jeandavid8@verizon.net> wrote:
> On 7/6/19 4:36 AM, Nomen Nescio wrote:
>> A Florida city reportedly has fired one of its top tech 
>> employees after officials were forced to pay $460,000 in ransom 
>> to the hackers behind a cyber attack that disabled its servers, 
>> phones and email accounts.
>
> A friend of mine worked for a social services agency of our local
> government many years ago. Some genius had the database of all the
> necessary data in a single IBM IMS/DB IMS/DC system to handle all the
> data of the entire state. At one point, they installed an update which
> failed, and all the data were lost. My friend complained that all the
> employees had to work nights and weekends to re-enter the previous
> month's data transactions. During the daytime, they tried to serve their
> customers (welfare, mostly).
>
> I suggested that they just restore everything from the most recent
> backup and then apply the updates from the journal tapes. (This was back
> in the days of magnetic tape). I explained all this to my friend who
> inquired as to why they were not doing this. It turns out that the
> genius had turned off the backups because they took too much time and
> they needed someone to change the tapes. So he saved a little money that
> way.
>
> But the welfare clients could not get their checks that month, many got
>  evicted from their welfare hotels, and had problems paying for food and
> medications. I very much doubt the genius got fired.

I have a friend who works in security for a major US bank and the
things he tells me are frightening. First off, the Russians are
down on the list of potential hackers.

Number 1 is China by far.
Followed by North Korea, Middle Eastern countries and some of
the Slavic countries.
They get hammered 100's of thousands +++ of times per day by these countries 
probing their infrastructure.

It's like the wild wild west out there.




-- 
POSHLYAK
Pronounced - POSH LEE ACK
Combines for the win!

[toc] | [prev] | [next] | [standalone]

#27725

On 7/27/2019 10:22 PM, POSHLYAK wrote:
> On 2019-07-28, Jean-David Beyer <jeandavid8@verizon.net> wrote:
>> On 7/6/19 4:36 AM, Nomen Nescio wrote:
>>> A Florida city reportedly has fired one of its top tech
>>> employees after officials were forced to pay $460,000 in ransom
>>> to the hackers behind a cyber attack that disabled its servers,
>>> phones and email accounts.
>>
>> A friend of mine worked for a social services agency of our local
>> government many years ago. Some genius had the database of all the
>> necessary data in a single IBM IMS/DB IMS/DC system to handle all the
>> data of the entire state. At one point, they installed an update which
>> failed, and all the data were lost. My friend complained that all the
>> employees had to work nights and weekends to re-enter the previous
>> month's data transactions. During the daytime, they tried to serve their
>> customers (welfare, mostly).
>>
>> I suggested that they just restore everything from the most recent
>> backup and then apply the updates from the journal tapes. (This was back
>> in the days of magnetic tape). I explained all this to my friend who
>> inquired as to why they were not doing this. It turns out that the
>> genius had turned off the backups because they took too much time and
>> they needed someone to change the tapes. So he saved a little money that
>> way.
>>
>> But the welfare clients could not get their checks that month, many got
>>   evicted from their welfare hotels, and had problems paying for food and
>> medications. I very much doubt the genius got fired.
> 
> I have a friend who works in security for a major US bank and the
> things he tells me are frightening. First off, the Russians are
> down on the list of potential hackers.
> 
> Number 1 is China by far.
> Followed by North Korea, Middle Eastern countries and some of
> the Slavic countries.
> They get hammered 100's of thousands +++ of times per day by these countries
> probing their infrastructure.
> 
> It's like the wild wild west out there.
> 
> 
> 
> 
I worked for a large pharmaceutical company.  Thier IT department locked 
down all of the company computers so only company approved software 
would run, all data was on company servers.

EXCEPT,  They forgot the DOS batch commands and batch files.  The 
"Obsolete" DOS commands could do about any thing you wanted on their 
secure system.

-- 
Judge your ancestors by how well they met their standards not yours.
They did not know your standards, so could not try to meet them.

[toc] | [prev] | [next] | [standalone]

#27726

>
> I have a friend who works in security for a major US bank and the
> things he tells me are frightening. First off, the Russians are
> down on the list of potential hackers.
> 
> Number 1 is China by far.
> Followed by North Korea, Middle Eastern countries and some of
> the Slavic countries.
> They get hammered 100's of thousands +++ of times per day by these 
countries
> probing their infrastructure.
> 
> It's like the wild wild west out there.

  This is why I installed ipset on my server and block all of China, 
Russia, North Korea and Slavic countries.  This is something that 
most all servers should.  It is not like you are going to miss out 
on any business from these corrupt, commie countries.

[toc] | [prev] | [next] | [standalone]

#27727

> 
>>
>> I have a friend who works in security for a major US bank and the
>> things he tells me are frightening. First off, the Russians are
>> down on the list of potential hackers.
>>
>> Number 1 is China by far.
>> Followed by North Korea, Middle Eastern countries and some of
>> the Slavic countries.
>> They get hammered 100's of thousands +++ of times per day by 
these  countries
>> probing their infrastructure.
>>
>> It's like the wild wild west out there.
> 
> This is why I installed ipset on my server and block all of China,
> Russia, North Korea and Slavic countries.  This is something that
> most all servers should.  It is not like you are going to miss out
> on any business from these corrupt, commie countries.

  You need to include all of Africa too.

[toc] | [prev] | [next] | [standalone]

#27729

On 28/07/2019 15.50, Anonymous wrote:
>>
>>>
>>> I have a friend who works in security for a major US bank and the
>>> things he tells me are frightening. First off, the Russians are
>>> down on the list of potential hackers.
>>>
>>> Number 1 is China by far.
>>> Followed by North Korea, Middle Eastern countries and some of
>>> the Slavic countries.
>>> They get hammered 100's of thousands +++ of times per day by 
> these  countries
>>> probing their infrastructure.
>>>
>>> It's like the wild wild west out there.
>>
>> This is why I installed ipset on my server and block all of China,
>> Russia, North Korea and Slavic countries.  This is something that
>> most all servers should.  It is not like you are going to miss out
>> on any business from these corrupt, commie countries.
> 
>   You need to include all of Africa too.
> 

And all of USA. That's the worst one, but you will not see it in the logs.

-- 
Cheers, Carlos.

[toc] | [prev] | [next] | [standalone]

#27733

In message <95o01g-506.ln1@Telcontar.valinor>, Carlos E.R. 
<robin_listas@es.invalid> writes:
>On 28/07/2019 15.50, Anonymous wrote:
[]
(Someone else wrote - attribution snipped before this point:)
>>> This is why I installed ipset on my server and block all of China,
>>> Russia, North Korea and Slavic countries.  This is something that
>>> most all servers should.  It is not like you are going to miss out
>>> on any business from these corrupt, commie countries.
>>
>>   You need to include all of Africa too.
>>
>
>And all of USA. That's the worst one, but you will not see it in the logs.
>
Difficult, as very few use the .us TLD. I guess since (more or less) the 
internet was invented/developed in USA, the .com, etc. TLDs predominate, 
but I do continue to be surprised that people aren't _proud_ to use a 
.us address.
-- 
J. P. Gilliver. UMRA: 1960/<1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

What a strange illusion it is to suppose that beauty is goodness. -Leo Tolstoy,
novelist and philosopher (1828-1910)

[toc] | [prev] | [next] | [standalone]

#27735

On 28/07/2019 23:50, J. P. Gilliver (John) wrote:
> In message <95o01g-506.ln1@Telcontar.valinor>, Carlos E.R. 
> <robin_listas@es.invalid> writes:
>> On 28/07/2019 15.50, Anonymous wrote:
> []
> (Someone else wrote - attribution snipped before this point:)
>>>> This is why I installed ipset on my server and block all of China,
>>>> Russia, North Korea and Slavic countries.  This is something that
>>>> most all servers should.  It is not like you are going to miss out
>>>> on any business from these corrupt, commie countries.
>>>
>>>   You need to include all of Africa too.
>>>
>>
>> And all of USA. That's the worst one, but you will not see it in the 
>> logs.
>>
> Difficult, as very few use the .us TLD. I guess since (more or less) the 
> internet was invented/developed in USA, the .com, etc. TLDs predominate, 
> but I do continue to be surprised that people aren't _proud_ to use a 
> .us address.

Am I intuiting that you think ipset works on domain names rather than IP 
addresses?


-- 
“It is dangerous to be right in matters on which the established 
authorities are wrong.”

― Voltaire, The Age of Louis XIV

[toc] | [prev] | [next] | [standalone]

#27736

In message <qhlf3n$bu0$2@dont-email.me>, The Natural Philosopher 
<tnp@invalid.invalid> writes:
>On 28/07/2019 23:50, J. P. Gilliver (John) wrote:
>> In message <95o01g-506.ln1@Telcontar.valinor>, Carlos E.R. 
>><robin_listas@es.invalid> writes:
>>> On 28/07/2019 15.50, Anonymous wrote:
>> []
>> (Someone else wrote - attribution snipped before this point:)
>>>>> This is why I installed ipset on my server and block all of China,
>>>>> Russia, North Korea and Slavic countries.  This is something that
>>>>> most all servers should.  It is not like you are going to miss out
>>>>> on any business from these corrupt, commie countries.
>>>>
>>>>   You need to include all of Africa too.
>>>>
>>>
>>> And all of USA. That's the worst one, but you will not see it in the 
>>>logs.
>>>
>> Difficult, as very few use the .us TLD. I guess since (more or less) 
>>the  internet was invented/developed in USA, the .com, etc. TLDs 
>>predominate,  but I do continue to be surprised that people aren't 
>>_proud_ to use a  .us address.
>
>Am I intuiting that you think ipset works on domain names rather than 
>IP addresses?
>
Sorry, I hadn't noticed you said you were using ipset (of which I know 
nothing). I was thinking of host file and similar filtering.
>
How would you know which IP addresses are any given country anyway?
-- 
J. P. Gilliver. UMRA: 1960/<1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

That's how he [Dr. Who] seems to me. He's always been someone who gets the
/Guardian/. There are some parts of the universe where it's harder to get hold
of. - Peter Capaldi (current incumbent Doctor), RT 2016/11/26-12/2

[toc] | [prev] | [next] | [standalone]

#27738

On 29/07/2019 03:01, J. P. Gilliver (John) wrote:
> In message <qhlf3n$bu0$2@dont-email.me>, The Natural Philosopher 
> <tnp@invalid.invalid> writes:
>> On 28/07/2019 23:50, J. P. Gilliver (John) wrote:
>>> In message <95o01g-506.ln1@Telcontar.valinor>, Carlos E.R. 
>>> <robin_listas@es.invalid> writes:
>>>> On 28/07/2019 15.50, Anonymous wrote:
>>> []
>>> (Someone else wrote - attribution snipped before this point:)
>>>>>> This is why I installed ipset on my server and block all of China,
>>>>>> Russia, North Korea and Slavic countries.  This is something that
>>>>>> most all servers should.  It is not like you are going to miss out
>>>>>> on any business from these corrupt, commie countries.
>>>>>
>>>>>   You need to include all of Africa too.
>>>>>
>>>>
>>>> And all of USA. That's the worst one, but you will not see it in the 
>>>> logs.
>>>>
>>> Difficult, as very few use the .us TLD. I guess since (more or less) 
>>> the  internet was invented/developed in USA, the .com, etc. TLDs 
>>> predominate,  but I do continue to be surprised that people aren't 
>>> _proud_ to use a  .us address.
>>
>> Am I intuiting that you think ipset works on domain names rather than 
>> IP addresses?
>>
> Sorry, I hadn't noticed you said you were using ipset (of which I know 
> nothing). I was thinking of host file and similar filtering.

Not me. Someone lese.

>>
> How would you know which IP addresses are any given country anyway?

whois lookup on various ip ranges will reveal who issued them and to whom


e.g.
$whois 5.5.5.5
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '5.4.0.0 - 5.7.255.255'

% Abuse contact for '5.4.0.0 - 5.7.255.255' is 'abuse.de@telefonica.com'

inetnum:        5.4.0.0 - 5.7.255.255
netname:        DE-MEDIAWAYS-20120425
country:        DE
org:            ORG-TDG4-RIPE
admin-c:        MWH6-RIPE
tech-c:         MWH6-RIPE
status:         ALLOCATED PA
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         MDA-Z
mnt-lower:      MDA-Z
mnt-routes:     MDA-Z
created:        2012-04-25T06:13:17Z
last-modified:  2018-07-30T09:52:34Z
source:         RIPE

organisation:   ORG-TDG4-RIPE
org-name:       Telefonica Germany GmbH & Co.OHG
org-type:       LIR
address:        Georg-Brauchle-Ring 50
address:        80992
address:        M�nchen
address:        GERMANY
phone:          +498924420
fax-no:         +49892442198224
admin-c:        RCM25-RIPE
admin-c:        WT546-RIPE
admin-c:        DK9212-RIPE
abuse-c:        MWH6-RIPE
mnt-ref:        RIPE-NCC-HM-MNT
mnt-ref:        MDA-Z
mnt-by:         RIPE-NCC-HM-MNT
mnt-by:         MDA-Z
created:        2004-04-17T12:45:50Z
last-modified:  2018-09-25T14:13:22Z
source:         RIPE # Filtered

role:           mediaWays Hostmaster
address:        Telefonica Germany GmbH & Co. OHG
address:        Georg-Brauchle-Ring 50
address:        80992 Muenchen
address:        DE
phone:          +498924420
fax-no:         +49892442198224
abuse-mailbox:  abuse.de@telefonica.com
admin-c:        DK9212-RIPE
admin-c:        RCM25-RIPE
admin-c:        WT546-RIPE
tech-c:         TG819-RIPE
tech-c:         ASZ-RIPE
nic-hdl:        MWH6-RIPE
mnt-by:         MDA-Z
created:        2001-11-06T10:42:25Z
last-modified:  2018-04-26T12:03:39Z
source:         RIPE # Filtered

% Information related to '5.4.0.0/14AS6805'

route:          5.4.0.0/14
descr:          Telefonica Germany GmbH & Co. OHG
remarks:        netname: DE-MEDIAWAYS
origin:         AS6805
mnt-by:         MDA-Z
created:        2018-08-08T09:03:25Z
last-modified:  2018-08-08T09:13:47Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 
1.94.1 (BLAARKOP)

This shows a block of IP addresses issued by RIPE to a German ISP


Or https://lite.ip2location.com/russian-federation-ip-address-ranges


will for example list exhastively ALL ip ranges belonging to Russisn 
organisations and ISPs


-- 
“Progress is precisely that which rules and regulations did not foresee,”

  – Ludwig von Mises

[toc] | [prev] | [next] | [standalone]

#27741

In message <qhmi19$1p8$1@dont-email.me>, The Natural Philosopher 
<tnp@invalid.invalid> writes:
>On 29/07/2019 03:01, J. P. Gilliver (John) wrote:
>> In message <qhlf3n$bu0$2@dont-email.me>, The Natural Philosopher 
>><tnp@invalid.invalid> writes:
>>> On 28/07/2019 23:50, J. P. Gilliver (John) wrote:
>>>> In message <95o01g-506.ln1@Telcontar.valinor>, Carlos E.R. 
>>>><robin_listas@es.invalid> writes:
>>>>> On 28/07/2019 15.50, Anonymous wrote:
>>>> []
>>>> (Someone else wrote - attribution snipped before this point:)
>>>>>>> This is why I installed ipset on my server and block all of China,
>>>>>>> Russia, North Korea and Slavic countries.  This is something that
>>>>>>> most all servers should.  It is not like you are going to miss out
>>>>>>> on any business from these corrupt, commie countries.
>>>>>>
>>>>>>   You need to include all of Africa too.
>>>>>>
>>>>>
>>>>> And all of USA. That's the worst one, but you will not see it in 
>>>>>the  logs.
>>>>>
>>>> Difficult, as very few use the .us TLD. I guess since (more or 
>>>>less)  the  internet was invented/developed in USA, the .com, etc. 
>>>>TLDs  predominate,  but I do continue to be surprised that people 
>>>>aren't  _proud_ to use a  .us address.
>>>
>>> Am I intuiting that you think ipset works on domain names rather 
>>>than  IP addresses?
>>>
>> Sorry, I hadn't noticed you said you were using ipset (of which I 
>>know  nothing). I was thinking of host file and similar filtering.
>
>Not me. Someone lese.
>
[I never said it was you - if you count ">"s, you'll see I was replying 
to the person posting as "Carlos E.R.  <robin_listas@es.invalid>".]
>>>
>> How would you know which IP addresses are any given country anyway?
>
>whois lookup on various ip ranges will reveal who issued them and to whom
>
>
>e.g.
>$whois 5.5.5.5
[details snipped]
>This shows a block of IP addresses issued by RIPE to a German ISP
>
Yes, but that doesn't answer my question "How would you know which IP 
addresses are any given country" - being able to look up which country a 
given IP is in (even assuming the whois return includes that datum) 
doesn't tell you which IP addresses are in a given country; it tells you 
(or might) which country a given IP address is in, which isn't the same 
thing!
>
>Or https://lite.ip2location.com/russian-federation-ip-address-ranges
>
>
>will for example list exhastively ALL ip ranges belonging to Russisn 
>organisations and ISPs
>
>
Now that's a closer answer. I see https://lite.ip2location.com/ has 
(bottom right of page) a list of countries, though I didn't investigate 
it.

Just looking at the russian-federation list linked to above, it's a very 
long and bitty list; your "ipset" must work hard blocking all those, 
plus the other countries you mention. (By "your" I mean whichever poster 
said they were doing that.)
-- 
J. P. Gilliver. UMRA: 1960/<1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

A.  Top-posters.
Q.  What's the most irritating thing on Usenet?

[toc] | [prev] | [next] | [standalone]

#27743

On Mon, 29 Jul 2019 11:58:32 +0100, "J. P. Gilliver (John)"
<G6JPG@255soft.uk> wrote:

>Yes, but that doesn't answer my question "How would you know which IP 
>addresses are any given country" - being able to look up which country a 
>given IP is in (even assuming the whois return includes that datum) 
>doesn't tell you which IP addresses are in a given country; it tells you 
>(or might) which country a given IP address is in, which isn't the same 
>thing!

	Geolite keeps its databases updated.
	Can be used with some hacking programs:

https://dev.maxmind.com/geoip/geoip2/geolite2/

	They +- recently changed the database format, which fsckd up a
lot of old programs ...

	As you say, anyone can rent space on a US server, so even if
the IP is American, the content could be from anywhere.
	[]'s
-- 
Don't be evil - Google 2004
We have a new policy  - Google 2012

[toc] | [prev] | [next] | [standalone]

#27744

On 29/07/2019 12.58, J. P. Gilliver (John) wrote:
> In message <qhmi19$1p8$1@dont-email.me>, The Natural Philosopher
> <tnp@invalid.invalid> writes:
>> On 29/07/2019 03:01, J. P. Gilliver (John) wrote:
>>> In message <qhlf3n$bu0$2@dont-email.me>, The Natural Philosopher
>>> <tnp@invalid.invalid> writes:
>>>> On 28/07/2019 23:50, J. P. Gilliver (John) wrote:
>>>>> In message <95o01g-506.ln1@Telcontar.valinor>, Carlos E.R.
>>>>> <robin_listas@es.invalid> writes:
>>>>>> On 28/07/2019 15.50, Anonymous wrote:
>>>>> []
>>>>> (Someone else wrote - attribution snipped before this point:)
>>>>>>>> This is why I installed ipset on my server and block all of China,
>>>>>>>> Russia, North Korea and Slavic countries.  This is something that
>>>>>>>> most all servers should.  It is not like you are going to miss out
>>>>>>>> on any business from these corrupt, commie countries.
>>>>>>>
>>>>>>>   You need to include all of Africa too.
>>>>>>>
>>>>>>
>>>>>> And all of USA. That's the worst one, but you will not see it in
>>>>>> the  logs.
>>>>>>
>>>>> Difficult, as very few use the .us TLD. I guess since (more or
>>>>> less)  the  internet was invented/developed in USA, the .com, etc.
>>>>> TLDs  predominate,  but I do continue to be surprised that people
>>>>> aren't  _proud_ to use a  .us address.
>>>>
>>>> Am I intuiting that you think ipset works on domain names rather
>>>> than  IP addresses?
>>>>
>>> Sorry, I hadn't noticed you said you were using ipset (of which I
>>> know  nothing). I was thinking of host file and similar filtering.
>>
>> Not me. Someone lese.
>>
> [I never said it was you - if you count ">"s, you'll see I was replying
> to the person posting as "Carlos E.R.  <robin_listas@es.invalid>".]

And you misunderstood me completely. The USA government is possibly the
worst "intruder" in your computers, and you will not see it coming,
because it is done by the FBI and the CIA, and they don't show in your
logs. You can do nothing against them. :-P

Better you disconnect your computers and cultivate turnips instead :-P

-- 
Cheers, Carlos.

[toc] | [prev] | [next] | [standalone]

#27748

> 
> And you misunderstood me completely. The USA government is 
possibly the
> worst "intruder" in your computers, and you will not see it 
coming,
> because it is done by the FBI and the CIA, and they don't show in 
your
> logs. You can do nothing against them. :-P
> 
> Better you disconnect your computers and cultivate turnips instead

  Use an external pfSense firewall.

[toc] | [prev] | [next] | [standalone]

#27752

In article <qhmnbr$uq7$3@neodome.net>, anonymous <anonymous@rip.ax.lt> wrote:
>> 
>> And you misunderstood me completely. The USA government is 
>possibly the
>> worst "intruder" in your computers, and you will not see it 
>coming,
>> because it is done by the FBI and the CIA, and they don't show in 
>your
>> logs. You can do nothing against them. :-P
>> 
>> Better you disconnect your computers and cultivate turnips instead
>
>  Use an external pfSense firewall.
>

Or build a BSD firewall.
-- 
Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca
Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising!
https://www.empire.kred/ROOTNK?t=94a1f39b  Look at Psalms 14 and 53 on Atheism
The only cure for grief is action.  -George Henry Lewes

[toc] | [prev] | [next] | [standalone]

#27753

On 29/07/2019 15.34, The Doctor wrote:
> In article <qhmnbr$uq7$3@neodome.net>, anonymous <anonymous@rip.ax.lt> wrote:
>>>
>>> And you misunderstood me completely. The USA government is 
>> possibly the
>>> worst "intruder" in your computers, and you will not see it 
>> coming,
>>> because it is done by the FBI and the CIA, and they don't show in 
>> your
>>> logs. You can do nothing against them. :-P
>>>
>>> Better you disconnect your computers and cultivate turnips instead
>>
>>  Use an external pfSense firewall.
>>
> 
> Or build a BSD firewall.

Neither will help you. Nothing will, except strong encryption in *all*
your communications.

-- 
Cheers, Carlos.

[toc] | [prev] | [next] | [standalone]

#27757

> 
> On 29/07/2019 15.34, The Doctor wrote:
> 
>> In article <qhmnbr$uq7$3@neodome.net>, anonymous 
<anonymous@rip.ax.lt> wrote:
>>>>
>>>> And you misunderstood me completely. The USA government is  
possibly the
>>>> worst "intruder" in your computers, and you will not see it  
coming,
>>>> because it is done by the FBI and the CIA, and they don't show 
in  your
>>>> logs. You can do nothing against them. :-P
>>>>
>>>> Better you disconnect your computers and cultivate turnips 
instead
>>>
>>>  Use an external pfSense firewall.
>>>
>>
>> Or build a BSD firewall.
> 
> Neither will help you. Nothing will, except strong encryption in 
*all*
> your communications.

  HA!  So says who?  pfSense is a BSD firewall.

[toc] | [prev] | [next] | [standalone]

#27762

On 29/07/2019 16.31, Anonymous wrote:
>>
>> On 29/07/2019 15.34, The Doctor wrote:
>>
>>> In article <qhmnbr$uq7$3@neodome.net>, anonymous <anonymous@rip.ax.lt> wrote:
>>>>>
>>>>> And you misunderstood me completely. The USA government is   possibly the
>>>>> worst "intruder" in your computers, and you will not see it   coming,
>>>>> because it is done by the FBI and the CIA, and they don't show  in  your
>>>>> logs. You can do nothing against them. :-P
>>>>>
>>>>> Better you disconnect your computers and cultivate turnips  instead
>>>>
>>>>  Use an external pfSense firewall.
>>>>
>>>
>>> Or build a BSD firewall.
>>
>> Neither will help you. Nothing will, except strong encryption in *all*
>> your communications.
> 
>   HA!  So says who?  pfSense is a BSD firewall.


LOL. Will it protect your emails you send from being scanned by the
secret services authorities?

Funny that you are paranoid enough to hide your name, but you trust a
firewall.


-- 
Cheers, Carlos.

[toc] | [prev] | [next] | [standalone]

#27771

On Mon, 29 Jul 2019 07:04:11 -0500, "anonymous" <anonymous@rip.ax.lt>
wrote:

>> 
>> And you misunderstood me completely. The USA government is 
>possibly the
>> worst "intruder" in your computers, and you will not see it 
>coming,
>> because it is done by the FBI and the CIA, and they don't show in 
>your
>> logs. You can do nothing against them. :-P
>> 
>> Better you disconnect your computers and cultivate turnips instead
>
>  Use an external pfSense firewall.

+1

[toc] | [prev] | [next] | [standalone]

Page 1 of 3  [1] 2 3  Next page →

Back to top | Article view | comp.os.linux.misc

csiph-web