SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: mr.mark who wrote (8974)4/4/2000 9:25:00 PM
From: NickSE  Respond to of 110626
 
You can either use the samspade.com site or any other that performs the WHOIS search. What that does is trace the offending IP address back to its owner (aka ISP). From there you can send a copy of the attack log to them hoping they will either slap his/her wrist or maybe even boot them. Depends on the ISP though cause some could care less while some will bring down the axe immediately. FWIW, I wouldn't report it unless it had a very high severity reading or it the little bugger was persistent.

Here's an example. Got an attempt from the following address:

24.114.29.198
cr83063-c.pr1.on.wave.home.com

Search results from samspade.org WHOIS search
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ACME Address Digger Results (Version 2.0alpha)

Let's go!
Official name: cr83063-c.pr1.on.wave.home.com

Addresses: 24.114.29.198

Whois for cr83063-c.pr1.on.wave.home.com
.com is the global domain of USA & International Commercial

(Whois queries for .com domains can be performed at rs.internic.net

whois -h whois.crsnic.net home.com

Redirecting to NETWORK SOLUTIONS, INC.

The Data in Network Solutions' WHOIS database is provided by Network Solutions for information purposes, and to assist persons in obtaining information about or related to a domain name registration record.

Network Solutions does not guarantee its accuracy. By submitting a WHOIS query, you agree that you will use this Data only for lawful purposes and that, under no circumstances will you use this Data to:
(1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail (spam); or (2) enable high volume, automated, electronic processes that apply to Network Solutions (or its systems). Network Solutions reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.

Registrant:
Home Network (HOME-DOM)
425 Broadway
Redwood City, CA 94063
US

Domain Name: HOME.COM

Administrative Contact, Technical Contact, Zone Contact:
Varsanyi, Ami (AV1662) abuse@HOME.NET (<---ISP Abuse Department)
@Home Network
425 Broadway
Redwood City, CA 94063

650-569-5333 (FAX) 650-482-4062
Billing Contact:
Du, Trung (TD2157) trung@CORP.HOME.NET
@Home Network
425 Broadway Street
Redwood City, CA 94063-3126

650-569-5437 (FAX) 650-569-5100

Record last updated on 28-Jul-1998.
Record created on 16-Dec-1993.
Database last updated on 4-Apr-2000 13:51:57 EDT.

Domain servers in listed order:

NS1.HOME.NET 24.0.0.27
NS2.HOME.NET 24.2.0.27

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

thank you for the network tools, nick. i suppose i should concern myself more with tracking down these hackers, whackers, crackers, probers and intruders <g3>. are you using any of the sam spade tools? thoughts?

Hope this helps,
Nick