[tor-relays] What to do about icecat.biz abuse complaints?
danielcase10 at gmail.com
Sat Apr 14 12:08:46 UTC 2012
I misread, I thought you said iceca*s*t. Two different services by the
looks of it, in that case I would go about blocking this range of IP
addresses: 220.127.116.11 -
That will block most icecat domains since that is their subnet range.
On 14 April 2012 13:46, Steve Snyder <swsnyder at snydernet.net> wrote:
> I'm using the Reduced Exit Policy (see:
> which does include port 8000, but shows that service as iRDMI.
> I usually associate "streaming software" with video or audio. What
> icecat.biz does (I have had to learn much more than I wanted to about
> them) is to provide manufacturer's documentation. I guess the "cat" is for
> Blocking the IP associated with icecat.biz is the first thing I did.
> That didn't stop the abuse reports. It seems that they have servers
> distributed all over the world, and the reports don't say what server
> experienced the abuse.
> Thanks for the response.
> On Saturday, April 14, 2012 7:32am, "Daniel Case" <danielcase10 at gmail.com>
> > _______________________________________________
> > tor-relays mailing list
> > tor-relays at lists.torproject.org
> > https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> > If I recall correctly, icecast is streaming software that runs on port
> > 8000. I assume that someone through your node is trying to "rip" the
> > content, which is what the "RIP Attempt" would be. (Not sure where you
> > the info that it is too many connections?)
> > If you block port 8000, that could stop people accessing the streaming
> > software without too many adverse affects on other services.
> > you can just block icecast.biz (I noticed there isn't a web server on
> > though)
> > Daniel
> > On 14 April 2012 13:15, Steve Snyder <swsnyder at snydernet.net> wrote:
> >> I often get abuse complaints from icecat,biz saying that a "RIP attempt"
> >> was seen from the IP address of my exit node. Apparently this involves
> >> many connections in a given period of time.
> >> I've tried to contact them but get no answer from the e-mail address
> >> included in the abuse reports. The Administrator listed in the
> >> says he just provides the network and can't provide any info about
> >> the company or who to contact within it.
> >> The abuse reports each say that my IP address will be blacklisted for a
> >> week. Fine with me. I'd just as soon they blacklist it forever but as
> >> are unresponsive to e-mail communication I can't tell them that.
> >> Short of turning my exit node into a middle node, what can I do about
> >> these frequent abuse reports?
> >> _______________________________________________
> >> tor-relays mailing list
> >> tor-relays at lists.torproject.org
> >> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> tor-relays mailing list
> tor-relays at lists.torproject.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the tor-relays