up vote 0 down vote favorite
share [g+] share [fb]

My webserver was hit by 3 different IP addresses all owned by a large US corporation (Large Borg like Software company).

While I have controls in place to detect and stop these attempts at data theft before they get too bad, I'm looking for advice on how to actually do something besides just blocking IP or IP ranges. How to actually get someone at the corporation to find the SOB that is doing this and stop them.

For IPs owned by overseas entities, I typically just block the IPs and fire off an email to the IP ownner (ISP usually), but never expect to hear back. But this is a LARGE US Software corp. IPs owned by them are hitting our servers inappropriately. I what this stuff stopped.

Is there a reasonable way to get Authorities involved?

link|improve this question
Maybe they aren't interested in your data and are hacked themselves? – Jens Erat Oct 19 '11 at 19:02
When you feel the need to put this "What are your experiences? Advice?" in your question, it is generally a good indication that it probably is not a good fit for the Q&A format here. – EBGreen Oct 19 '11 at 19:10
It sounds like you have a serious problem, but your question doesn't seem to be directly about hardware or software (or home networking). This may fit better on another website; possibly a forum. – Lord Torgamus Oct 19 '11 at 19:23
@Ranon, yes its possible, but I have to start somewhere. The nature of the attacks indicates that they were targeting my server/data specifically, not an automated script that happened to hit my server. – Kirk Oct 19 '11 at 19:26
@EBGreen, @Lord_Torgamus-> I appreciate your desire to keep the superuser.com site clean, useful and focused. Do you have any specific suggestions for other sites to post this question? But additionally, wouldn't "superusers" be interested in this kind of thing, so that when it happens to them... – Kirk Oct 19 '11 at 19:28
show 6 more comments
feedback

closed as off topic by ChrisF, Chris W. Rea, Mokubai, studiohack♦ Oct 19 '11 at 19:38

Questions on Super User are expected to generally relate to computer software or computer hardware, within the scope defined in the faq.

1 Answer

up vote 1 down vote

Do a WHOIS on the IPs and get the address used to report abuse(abuse@domain.com likley). Send them an e-mail with logs showing the attempts to access your server(s). Any major company will likley respond and let you know they are looking at your issue. @Ranon has a good point as well.

link|improve this answer
Thanks @Dave M, I did all that. But haven't' gotten a response yet. I've also called them, talked to various support people. Got promised they will get back to me (once the find the right group to handle this sort of thing). Anyway I'm looking for other avenues. – Kirk Oct 19 '11 at 19:24
feedback

Not the answer you're looking for? Browse other questions tagged or ask your own question.