Home page logo
/

nanog logo nanog mailing list archives

noncooperation in tracing an attack
From: Brian Holt <holt () nap net>
Date: Sat, 31 Jan 1998 16:21:48 -0600

        I'm very unhappy to have to post a message here to get someone at
globalcenter.net to help in tracing an attack that has been going on for
several hours now.  Their NOC notified our NOC that they would not be able
to get security involved in this attack until monday, which is completely
unacceptable.

        If anyone cares, the target for the attack is a single IP address of
207.227.138.15 and it has been spoofed to be coming from several different
IP addresses over the past few hours.  The first few addresses used were
1.1.1.1 and 2.2.2.2, now the current traffic flow is said to be coming from
207.227.138.15.

        I personally have no problem with blocking this attack to stop it, but it
sure would be nice to actually nab one of these people once in awhile.

        Thanks for the lack of help,

        Brian



  By Date           By Thread  

Current thread:
  • noncooperation in tracing an attack Brian Holt (Feb 01)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]