North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: "portscans" (was Re: Arbor Networks DoS defense product)

  • From: Scott Francis
  • Date: Mon May 20 02:05:42 2002

On Sun, May 19, 2002 at 10:03:08AM -0400, [email protected] said:
> 
> > > rough assessment of their network security, which was important to me
> > > as a customer for obvious reasons.
> > 
> > In that case, I would not consider the scan to have come from an
> > 'unaffiliated' person. I'm sure if the bank's network operator noticed it,
> > and contacted you, things would have been cleared up with no harm done. To
> 
> It sounds like you know something that I don't.  How do you find out the
> contact information for someone given only an IP address?

You know the contact information for the block that the scan originated from.
From there, it's detective work (if the admin of the block in question
cooperates, hopefully not too much).

-- 
Scott Francis                   [email protected] [home:] d a r k u n c l e . n e t
Systems/Network Manager          [email protected] [work:]         t o n o s . c o m
GPG public key 0xCB33CCA7              illum oportet crescere me autem minui

Attachment: pgp00041.pgp
Description: PGP signature