Atak


(Tekno Allah) #1

Nie wiem, co z tym dalej zrobić:

Outpost Firewall poinformował mnie o ataku: "Wykryto atak Moyari13 z 62.111.143.3"

Sprawdziłem ten IP na stronie http://ws.arin.net/cgi-bin/whois.pl i otrzymałem taki wynik:

OrgName: RIPE Network Coordination Centre

OrgID: RIPE

Address: P.O. Box 10096

City: Amsterdam

StateProv:

PostalCode: 1001EB

Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 62.0.0.0 - 62.255.255.255

CIDR: 62.0.0.0/8

NetName: RIPE-C3

NetHandle: NET-62-0-0-0-1

Parent:

NetType: Allocated to RIPE NCC

NameServer: NS-PRI.RIPE.NET

NameServer: SEC1.APNIC.NET

NameServer: SEC3.APNIC.NET

NameServer: NS2.NIC.FR

NameServer: SUNIC.SUNET.SE

NameServer: AUTH03.NS.UU.NET

NameServer: TINNIE.ARIN.NET

Comment: These addresses have been further assigned to users in

Comment: the RIPE NCC region. Contact information can be found in

Comment: the RIPE database at http://www.ripe.net/whois

RegDate: 1997-04-25

Updated: 2004-03-16

Następnie na stronie http://www.ripe.net/whois otrzymałem takie dane:

% This is the RIPE Whois query server #2.

% The objects are in RPSL format.

%

% Note: the default output of the RIPE Whois server

% is changed. Your tools may need to be adjusted. See

% http://www.ripe.net/db/news/abuse-propo ... 50331.html

% for more details.

%

% Rights restricted by copyright.

% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.

% To receive output for a database update, use the "-B" flag

% Information related to '62.111.143.0 - 62.111.143.255'

inetnum: 62.111.143.0 - 62.111.143.255

netname: NSM-BACKBONE

descr: WALY PIASTOWSKIE 1

descr: GDANSK

descr: Connected by Crowley Data Poland Sp. z o.o.

country: PL

admin-c: WB728-RIPE

tech-c: AC4103-RIPE

tech-c: PM452-RIPE

tech-c: GS1441-RIPE

mnt-by: AS12968-MNT

status: ASSIGNED PA

source: RIPE # Filtered

person: WOJCIECH BASALAJ

address: NET-SAT MEDIA SP.Z O.O.

address: CIESZYNSKIEGO WLADYSLAWA 1

address: GDANSK

address: POLAND

phone: +48 (58) 303 45 43

fax-no: +48 (58) 300 50 05

nic-hdl: WB728-RIPE

mnt-by: AS12968-MNT

source: RIPE # Filtered

person: Aleksander Cesarz

address: CROWLEY DATA POLAND Sp. z o.o.

address: ul. Stawki 2

address: 00-193 Warszawa

address: POLAND

phone: +48 22 8606960

fax-no: +48 22 6351400

nic-hdl: AC4103-RIPE

source: RIPE # Filtered

person: Przemyslaw Mujta

address: CROWLEY DATA POLAND

address: ul. Stawki 2

address: 00-193 Warszawa

phone: +48 22 8606958

fax-no: +48 22 8606796

nic-hdl: PM452-RIPE

mnt-by: AS12968-MNT

remarks: PGPKEY-0x35C16ACD

source: RIPE # Filtered

person: Grzegorz Swiderek

address: Crowley Data Poland

address: ul. Stawki 2

address: 00-193 Warszawa

address: POLAND

phone: +48 22 860 69 60

fax-no: +48 22 860 67 96

abuse-mailbox: abuse@crowley.pl

nic-hdl: GS1441-RIPE

mnt-by: AS12968-MNT

remarks: PGPKEY-0x0F4D56D4

source: RIPE # Filtered

% Information related to '62.111.128.0/17AS12968'

route: 62.111.128.0/17

descr: Crowley Data Poland

remarks: ----------

remarks: All abuse reports orginated from CDP network: abuse@cdp.pl

remarks: ----------

origin: AS12968

remarks: removed cross-mnt: AS12968-MNT

mnt-by: AS12968-MNT

source: RIPE # Filtered

Bold: Object type.

Underlined: Primary key(s).

Hyperlinks: Searchable Attributes.

W związku z tym mam pytanie: co można zrobić z powyższymi danymi?


(Qbek50) #2

zapodaj loga z HiJAcka :stuck_out_tongue:


(Tekno Allah) #3

Podałem go trochę wcześniej :smiley: . Jest tutaj:

http://forum.dobreprogramy.pl/viewtopic.php?t=29136


(fiesta) #4

Wyślij je tutaj:

z odpowiednim opisem


(Tekno Allah) #5

Dzięki. Tak właśnie zrobię.

Można już zamknąć posta.