I guess no one told them that someone might consider this an attack? I
have set up detectors where pinging consecutive "honeypot" ip addresses
results in the source IP address being blacklisted for a day or two.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I tend to agree, but back when I manned the abuse desk (among others) at my former employer, I would see abuse reports come in all the time that were basically a report from whatever security software someone was running on their PC, accompanied by a message that was usually something along the lines of this:
"HOST x.x.x.x ON YOUR NETWORK PINGED ME!!!! I TAKE MY SECURITY SERIOUSLY!! I'M CALLING THE FBI!!!"
The knee-jerk reaction is rarely the right one 
jms
You are more likely to get 5000 zonealarm emails....
Justin M. Streiner wrote:
You are more likely to get 5000 zonealarm emails....
Got tons of those...
...and BlackIce, DShield, Norton, SamSpade, and all the rest
But there were also lots of people who took time out of their busy day to personally write their own flaming emails, rather than just relying on the boilerplate reports many of the packages above commonly send out. I felt honored
jms
You are more likely to get 5000 zonealarm emails....
Or a place on dshield's top 10.
Ok.
To make my own contribution to this thread hijack somewhat operational...
How many people have had to add to their NOC/Abuse desk SOP:
"When someone calls threatening that they are the FBI/CIA/NSA/Your grandmother returned from the dead...
<something, something, something>
but essentially, "Don't Panic. And they are basically a crackpot.""
Deepak
Gadi Evron wrote: