For constant, well-known abusers, there is one almost sure-fire way to teach them to stop - report them to their ISP. Here is an example of such, using KAS's IP.
Based on a basic who.is lookup (
http://who.is/whois-ip/ip-address/46.72.128.173/), we get a report. In this report, we are referred to ripe.net for further information.
At ripe.net, we are given this:
inetnum: 46.72.0.0 - 46.72.255.255
netname: TI-BB
descr: customers broadband aggregation
country: RU
admin-c: TI
tech-c: TI
status: ASSIGNED PA
mnt-by: TI-MNT
source: RIPE #Filtered
role: TI NOC
address: NetByNet holding
address: Moscow, Russia, 117105
address: Varshavskoe highway, 9 bld. 1B
remarks: *****************************************
remarks: Please send abuse reports to [email protected]
remarks: Abuse reports sent to other email will be SILENTLY DISCARDED
remarks: *****************************************
abuse-mailbox: [email protected]
phone: +7 495 980 2800
fax-no: +7 495 740 4811
admin-c: SGR
admin-c: ALI224-RIPE
admin-c: MA9625-RIPE
tech-c: MA9625-RIPE
nic-hdl: TI
mnt-by: TI-MNT
source: RIPE #Filtered
route: 46.72.128.0/19
descr: Inetera Ltd. route
origin: AS48146
mnt-by: TI-MNT
source: RIPE #Filtered
route: 46.72.128.0/17
descr: temporary ex-Inetera fix route
origin: AS12714
mnt-by: TI-MNT
source: RIPE #Filtered
route: 46.72.0.0/16
descr: TI route block
origin: AS12714
mnt-by: TI-MNT
source: RIPE #Filtered
While this is a lot to sort through, we have obtained the important info - the name and contact information for his ISP:
role: TI NOC
address: NetByNet holding
address: Moscow, Russia, 117105
address: Varshavskoe highway, 9 bld. 1B
remarks: *****************************************
remarks: Please send abuse reports to
[email protected]remarks: Abuse reports sent to other email will be SILENTLY DISCARDED
remarks: *****************************************
abuse-mailbox:
[email protected]phone: +7 495 980 2800
fax-no: +7 495 740 4811
With this, you can contact them at their abuse email, and explain the situation. To be successfull, you should provide accurate evidence and present strong arguments to them. It is against the law in just about every country to willingly attack another computer on the internet, period. KAS has admitted to this here on the forums.
You should really only bother with contacting an ISP if a user has shown an unusual obsession to attacking your server. Otherwise, a serial ban, subnet ban, or both will stop most people.
