My firewall is telling me that I am receiving undesirable traffic (port scans/probes/attacks) from an IP registered to Grande Communications. Why am I seeing this type of traffic and how do I report this to the Grande Abuse Department?
This type of traffic is almost always originated from a computer that has been infected with a virus. Please submit the following information to abuse@grandecom.com and we will identify the cause of the traffic and take steps to help the situation:
- Submit any firewall logs that will indicate the nature of the activity being reported. Firewall logs should be submitted in a text-only format. Logs that are submitted in the format of spreadsheets, images, or other specialized formats may not be processed as efficiently as if they were received in a text-only format.
- The IP of the host where the activity is originating (source ip) must be included.
- Timestamp of the activity including the Timezone. Without the Timezone included the report may not be processed.
- Source port (if available) and the Destination port (required) of the activity.
In addition please make sure that you report meets the following requirements:
- Some software firewall products for consumers do not do a very good job of providing all the required information above. Unfortunately without all this information we are unable to process a report so please be sure that your firewall software is providing all of this information.
- Only one host at a time should be submitted to the Abuse Department. If a complaint needs to be filed against multiple hosts it is desirable for this to be done with seperate emails to the Abuse Department. This allows the individual incident to be processed and tracked with the highest level of efficiency.
- Grande users should not report port scans to our Abuse Department unless the port scan is originating from a Grande ip address. For port scans originating from another network or ISP please use the form located at
http://www.abuse.net/lookup.phtml. Enter the offending ip address into the form to display the abuse contact information for the owners of the ip address.