Re: Reporting organized penetration attempt from multiple sites

Article View: comp.security.misc

Article #1134

Back to comp.security.misc Previous Next

#1134

From: Lachlan Cranswick
Date: Wed, 11 Nov 1998 00:00

23 lines
1417 bytes


>Where/who would be the best place to report an attempt to penetrate a
>single target with the attacks originating from multiple nonresolving
>ip addresses (over 120 IP addresses involved)?
>---
>Corwin J. Grey
>Systems Administrator
>West Coast Family Network Systems
>cgrey@wcfamily.com

Are you able to give more information publically?  I have just got some
TCPDUMP info from an intermittent web hosting problem I am trying
to track down (possible attempted Denial of Service?) - or just
general non-DoS network wierdness - and at least one nonresolving 
IP address features prominently in the TCPDUMP log.

Doesn't stop my web service - just slows it down - don't really know
what is happening???

Details in a separate post.

Lachlan.

Technical Details

Message-ID: <l.cranswick.208.01B0D14D@dl.ac.uk>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <364a1860.7158945@news2.newscene.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,2aa59064f4af15b6
X-Google-Attributes: gid10952f,public
X-Google-Thread: 1133d0,2aa59064f4af15b6
X-Google-Attributes: gid1133d0,public
X-Google-Thread: ff723,2aa59064f4af15b6
X-Google-Attributes: gidff723,public
From: l.cranswick@dl.ac.uk (Lachlan Cranswick)
Subject: Re: Reporting organized penetration attempt from multiple sites
Date: 1998/11/11
Message-ID: <l.cranswick.208.01B0D14D@dl.ac.uk>
X-Deja-AN: 410897943
References: <364a1860.7158945@news2.newscene.com>
Organization: Daresbury Laboratory
Newsgroups: comp.security.misc,cern.security.unix,comp.security.unix

Reply to Parent Message