Potential Hack ?

[Wombat]

NIS picked up a potential hack. I traced it and it gave me a location in Dallas.

What does one do with this info?


Paul

[muno]

Nothing.

[Wombat]

Really?

Paul

[muno]

Yes.

[Wombat]

OK,,, but why?

[nomaxim]

More then likly just noise.

I get random alerts all the time, like 4-5 a day.

However, if you get 6 or so in like 20 minutes from the same source then I'd be a little worried.

Most you can really do is fire off an e-mail to the ISP's abuse center.

[Wombat]

Cool,

Thanks..

Paul

[muno]

A potential hack means nothing, when you start getting hammered from a specific ip for extented periods of time and multiple times, you can check http://www.samspade.org on what is the abuse address of the isp, and email them about a possible hacked computer or a malicious user.
The isp will do something, or not.

For the time I've been in the internet with a always-on connection (3years or so) I've only once reported something to an abuse address (which was my own isps abuse, I was getting scanned 10times per hour from a lan ip).

So, generally you don't do anything with anyones ip, or their location.

[Wombat]

Thanks guys,
You learn something new every day..

Paul