Re: Reporting organized penetration attempt from multiple sites

Article View: comp.security.misc

Article #1143

Back to comp.security.misc Previous Next

#1143

From: Joe Shaw
Date: Mon, 23 Nov 1998 00:00

20 lines
1564 bytes

On 11 Nov 1998, Corwin J. Grey wrote:

> Where/who would be the best place to report an attempt to penetrate a
> single target with the attacks originating from multiple nonresolving
> ip addresses (over 120 IP addresses involved)?
> 
> ---
> Corwin J. Grey
> Systems Administrator
> West Coast Family Network Systems
> cgrey@wcfamily.com

Your first step should be to contact CERT and your local law enforcement.
It's usually hard to get law enforcement to do anything unless you can
show monetary loss.

Joseph Shaw        - jshaw@insync.net
NetAdmin/Security  - Insync Internet Services
Free UNIX advocate - "I hack, therefore I am."

Technical Details

Message-ID: <Pine.SOL.4.05.9811230304090.28481-100000@vellocet.insync.net>

Path: arc1-ca.pugleaf.net!unknown!not-for-mail

References: <364a1860.7158945@news2.newscene.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10952f,2aa59064f4af15b6
X-Google-Attributes: gid10952f,public
X-Google-Thread: ff723,2aa59064f4af15b6
X-Google-Attributes: gidff723,public
X-Google-Thread: 1133d0,2aa59064f4af15b6
X-Google-Attributes: gid1133d0,public
From: Joe  Shaw <jshaw@vellocet.insync.net>
Subject: Re: Reporting organized penetration attempt from multiple sites
Date: 1998/11/23
Message-ID: <Pine.SOL.4.05.9811230304090.28481-100000@vellocet.insync.net>
X-Deja-AN: 414733768
References: <364a1860.7158945@news2.newscene.com>
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Complaints-To: news@insync.net
X-Trace: insync 911811916 204.253.208.10 (Mon, 23 Nov 1998 03:05:16 CDT)
Organization: Insync Internet Services, Inc.
MIME-Version: 1.0
NNTP-Posting-Date: Mon, 23 Nov 1998 03:05:16 CDT
Newsgroups: comp.security.misc,cern.security.unix,comp.security.unix

Reply to Parent Message