Hi Jeroen > Did you check if the customer's network is maybe infected with some botnet or > spambot that triggers honeypots?
Usually we learn about such incidents through GovCert or other complaints. We received none. > Clearly, if the IP changes and the customer gets blocked again, it is > something being caused by the source IP... > > Netflow... Netflow all the things ;) We only have traffic counters, no detailed netflows :-) The counters look normal. About 10:1 download:upload ratio, and similar to other customers. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
