To: mr.mark who wrote (8974 ) 4/4/2000 9:25:00 PM From: NickSE Respond to of 110626
You can either use the samspade.com site or any other that performs the WHOIS search. What that does is trace the offending IP address back to its owner (aka ISP). From there you can send a copy of the attack log to them hoping they will either slap his/her wrist or maybe even boot them. Depends on the ISP though cause some could care less while some will bring down the axe immediately. FWIW, I wouldn't report it unless it had a very high severity reading or it the little bugger was persistent. Here's an example. Got an attempt from the following address: 24.114.29.198 cr83063-c.pr1.on.wave.home.com Search results from samspade.org WHOIS search ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ACME Address Digger Results (Version 2.0alpha) Let's go! Official name: cr83063-c.pr1.on.wave.home.com Addresses: 24.114.29.198 Whois for cr83063-c.pr1.on.wave.home.com .com is the global domain of USA & International Commercial (Whois queries for .com domains can be performed at rs.internic.net whois -h whois.crsnic.net home.com Redirecting to NETWORK SOLUTIONS, INC. The Data in Network Solutions' WHOIS database is provided by Network Solutions for information purposes, and to assist persons in obtaining information about or related to a domain name registration record. Network Solutions does not guarantee its accuracy. By submitting a WHOIS query, you agree that you will use this Data only for lawful purposes and that, under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail (spam); or (2) enable high volume, automated, electronic processes that apply to Network Solutions (or its systems). Network Solutions reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy. Registrant: Home Network (HOME-DOM) 425 Broadway Redwood City, CA 94063 US Domain Name: HOME.COM Administrative Contact, Technical Contact, Zone Contact: Varsanyi, Ami (AV1662) abuse@HOME.NET (<---ISP Abuse Department) @Home Network 425 Broadway Redwood City, CA 94063 650-569-5333 (FAX) 650-482-4062 Billing Contact: Du, Trung (TD2157) trung@CORP.HOME.NET @Home Network 425 Broadway Street Redwood City, CA 94063-3126 650-569-5437 (FAX) 650-569-5100 Record last updated on 28-Jul-1998. Record created on 16-Dec-1993. Database last updated on 4-Apr-2000 13:51:57 EDT. Domain servers in listed order: NS1.HOME.NET 24.0.0.27 NS2.HOME.NET 24.2.0.27 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~thank you for the network tools, nick. i suppose i should concern myself more with tracking down these hackers, whackers, crackers, probers and intruders <g3>. are you using any of the sam spade tools? thoughts? Hope this helps, Nick