RE: Proper ISP Reporting
"Lyal Collins" <[email protected]>
| Newsgroups | gmane.comp.security.incidents |
|---|---|
| Message-ID | <002101c5a2e4$1d6af840$6600a8c0@kpllaptop> |
Ive had useful outcomes by: Sending them an email - include the security@, abuse@, sales@, technical@ and info@ addresses (someone should read it from that list) Include in the email some log extracts - IP address, dates, times and an assessment of severity (critical, nuisance value etc) - but not too much - they only need little detail to identify the miscreants, in my experience. Thanks them for their time and assistance. The next issue is how does the service provider react, or if they have a reaction/incident management process at all.... Lyal -----Original Message----- From: Jason Burton [mailto:[email protected]] Sent: Wednesday, 17 August 2005 12:02 PM To: [email protected] Subject: Proper ISP Reporting Anyone have samples of how to properly report to ISP's regarding abuse? ie. What format the email should be in, sample phrases, or sentences that might help. I've been doing this for a while and while some work, some have not. Im wondering if anyone has examples. Thanks Jason Burton Leximedia LLC [email protected]