Forum Home
Press F1
 
Thread ID: 51958 2004-12-05 22:40:00 What do I do when somebody tries to exploit my www server? Chilling_Silence (9) Press F1
Post ID Timestamp Content User
299860 2004-12-06 06:52:00 > Ive already figured its an IP from the Xtra ADSL
> Pool, but figured Global-gateway were the ones to
> see....

global-gateway is operated by telecom
segfault (655)
299861 2004-12-06 06:54:00 Sweeeet..... So the emai I sent to them containing all the neccesary information such as Time/Date and IP - They can match to a users account and take the appropriate measures from there?

Ive got a few attempts... Actually there was about 6 different attempts yesterday so Im not sure if somebody doesnt like me :-/ All different IPs.


Chill.
Chilling_Silence (9)
299862 2004-12-06 06:57:00 Google turns up this (www.addict3d.org)

Apparently I should have been running Windows......

Microsoft Security Bulletin MS03-051
Buffer Overrun in Microsoft FrontPage Server Extensions Could Allow Code Execution (813360)
Chilling_Silence (9)
299863 2004-12-06 08:08:00 Global Gateway are not the right people to contact, all they do is manage the IP space.

The Global Gateway IP's can be assigned to any ISP, we have several ADSL class C ranges and all the whois information on them reports either Global Gateway or APNIC.

A reverse lookup on the IP address should give you the best idea of which ISP to contact, in this case Xtra.
ninja (1671)
1 2