[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nanog
Subject:    noncooperation in tracing an attack
From:       Brian Holt <holt () nap ! net>
Date:       1998-01-31 22:21:48
[Download RAW message or body]

	I'm very unhappy to have to post a message here to get someone at
globalcenter.net to help in tracing an attack that has been going on for
several hours now.  Their NOC notified our NOC that they would not be able
to get security involved in this attack until monday, which is completely
unacceptable.

	If anyone cares, the target for the attack is a single IP address of
207.227.138.15 and it has been spoofed to be coming from several different
IP addresses over the past few hours.  The first few addresses used were
1.1.1.1 and 2.2.2.2, now the current traffic flow is said to be coming from
207.227.138.15.

	I personally have no problem with blocking this attack to stop it, but it
sure would be nice to actually nab one of these people once in awhile.

	Thanks for the lack of help,

	Brian

[prev in list] [next in list] [prev in thread] [next in thread]