Re: Reporting organized penetration attempt from multiple sites

Article View: comp.security.misc

Article #1141

Back to comp.security.misc Previous Next

#1141

From: Frank Louwers
Date: Thu, 12 Nov 1998 00:00

16 lines
1330 bytes

Bob Tinsley (bob@earthrise.demon.co.uk) wrote:
> Corwin J. Grey wrote:
> >Where/who would be the best place to report an attempt to penetrate a
> > single target with the attacks originating from multiple nonresolving
> > ip addresses (over 120 IP addresses involved)?

try to find the ISP responsable for the IPs, and send mail to
root@theISP.com, and abuse@theISP.com.

I would also report it to your federal police. 9 chances out of 10,
they'll do nothing, but in the end, they will become aware of the problem
...

Grtnx,

Frank

Technical Details

Message-ID: <72e47u$k0k$3@inf6serv.rug.ac.be>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <364a1860.7158945@news2.newscene.com> <364A3101.ADBC459F@earthrise.demon.co.uk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,2aa59064f4af15b6
X-Google-Attributes: gid10952f,public
X-Google-Thread: ff723,2aa59064f4af15b6
X-Google-Attributes: gidff723,public
X-Google-Thread: 1133d0,2aa59064f4af15b6
X-Google-Attributes: gid1133d0,public
From: frank@nospam.zeus.rug.ac.be (Frank Louwers)
Subject: Re: Reporting organized penetration attempt from multiple sites
Date: 1998/11/12
Message-ID: <72e47u$k0k$3@inf6serv.rug.ac.be>
X-Deja-AN: 411012642
References: <364a1860.7158945@news2.newscene.com> <364A3101.ADBC459F@earthrise.demon.co.uk>
Followup-To: comp.security.misc,cern.security.unix,comp.security.unix
Organization: Zeus WPI at the University of Ghent
Newsgroups: comp.security.misc,cern.security.unix,comp.security.unix

Reply to Parent Message